Southern Utah University

Course Syllabus

Southern Utah University
Southern Utah University
Fall Semester 2025

Digital Forensics and Cyber Crime (Face-to-Face)

CYBR 3700-01

Course: CYBR 3700-01
Credits: 3
Term: Fall Semester 2025
Department: CSIS
CRN: 30397

Course Description

This course covers the process of obtaining and analyzing digital information stored on digital devices including investigation, data acquisition, file system analysis, and file analysis. This course introduces various tools used in the digital forensics industry. This course will also explore ethical issues faced by digital forensic examiners. (Fall) [Graded (Standard Letter)] Prerequisite(s): CYBR 2750 - Prerequisite Min. Grade: C-

Required Texts

Learn Computer Forensics, William Oettinger 2nd Ed.  Available via O’Reilly Books - https://learning.oreilly.com/library/view/learn-computer-forensics/9781803238302/

Learning Outcomes

  1. Obtain a basic understanding of the digital forensics industry
  2. Classify the admissibility of evidence
  3. Understand and be able to apply the digital forensic process
  4. Utilize the digital forensics process on basic digital evidence types
  5. Discuss the ethics involved in digital forensics

Course Requirements

Quizzes

You will have 13-14 quizzes in this course. Each quiz will consist of 10-20 multiple-choice questions, and may also contain some fill-in-the blank, matching, or short essay style questions. You will have 20-30 minutes, depending on quiz length and question types, and one attempt to complete each quiz. Quizzes must be submitted no later than the assigned due date. You may use your textbook or notes to complete the quiz.

Homework

You will have approximately 6 homework assignments during the semester.  Each will focus on a different practical or theoretical aspect of forensics.  Each will take about 2-3 hours to complete.

Hands-on Assessments

This course will not have typical exams.  Instead, three times during the semester, you will apply what you have learned to an essay or practical, hands-on demonstration of a set of skills. The topics below are some examples of topics that you may need to write about or demonstrate.  This list is only examples, not exhaustive.

  1. Perform forensics on an unknown disk image
  2. Classify evidence found in an investigation as admissible or inadmissible in court
  3. Interpret the findings from a forensic investigation
  4. Create a forensic image

Grade Weights


 | Assignment Category | Points | Percent
| Quizzes (approx 14 @ 20 pts), lowest dropped | 260 | ~33 

| Homework (6 @ 40 pts) | 240 | ~30 

| Hands-on assessments  (3 @ 100 pts) | 300 |  ~38
|   |    |  
| Total | 800 |  100

Course Outline

Module 1 - Types of forensic investigations, types of evidence, laws governing computer crimes
Module 2 - Forensic report writing, formatting and content
Module 3 - Forensic report writing, formatting and content
Module 4 - Evidence acquisition, creating disk images with computer and write blocker, standalone imagers, and hashing images
Module 5 - Data recovery and analysis, discussion of filesystems and types of metadata contained on each
Module 6 - Data recovery and analysis - hands-on recovery of deleted files with forensic suites
Module 7 - Data recovery and analysis - hands-on recovery of deleted files with standalone tools
Module 8 - Wiping media and anti-forensic techniques
Module 9 - Windows artifacts, specific metadata that can be found on Windows systems
Module 10 - Expert witnessing and ethics, laws governing expert witnesses
Module 11 - Email forensics, where and how to collect emails for forensic purposes
Module 12 - Mobile forensics, phones and other mobile devices
Module 13 - Mac & Linux artifacts, specific metadata that can be found on Mac & Linux systems
Module 14 - RAM forensics, specific data that can be recovered from RAM images

Instructor's policies on late assignments and/or makeup work

Late Work Policy:

  • Quizzes are due at the date and time indicated on Canvas, no quizzes will be accepted after their due date. 
  • Discussions must also be submitted on time, since all need to participate in a discussion. 
  • Homework assignments may be submitted up to 72 hours late, a 10% penalty will be assessed for each 24 hours or any fraction thereof that an assignment is late.
  • Hands-On Assessments may be submitted up to 72 hours late, a 10% penalty will be assessed for each 24 hours or any fraction thereof that an assignment is late. 
In truly exceptional situations, like medical emergencies/death in the family, I'm happy to work with you to change due dates, etc.  Contact me as soon as possible to let me know, and we'll work something out.  I reserve the right to request verification of such situations.  However, other things like a major project at work and similar issues that can be avoided by not waiting until right before the due date will not be acceptable excuse for late work.

Attendance Policy

Attendance is generally not required for this course.  You are an adult, and are paying for the class, it's up to you as to whether you want the additional richness of information that comes with attending the class.

There are several class sessions where we use physical hardware, attendance will be required for those, and makeups won't be provided.

AI Policy

You may use AI for any purpose during this course.  In fact, I encourage it, with the single stipulation that you tell me you used it, and give a brief explanation of how, and whether it helped you or not.  Yes, this means a little more writing on your part!

At the instructor's sole discretion, extra credit may be awarded for an especially novel use of an AI engine, accompanied by a good writeup.

That said, I don't think it will be especially useful for most assignments in this course.

Course Fees

No additional fees

ADA Statement

Students with medical, psychological, learning, or other disabilities desiring academic adjustments, accommodations, or auxiliary aids will need to contact the Disability Resource Center, located in Room 206F of the Sharwan Smith Center or by phone at (435) 865-8042. The Disability Resource Center determines eligibility for and authorizes the provision of services.

If your instructor requires attendance, you may need to seek an ADA accommodation to request an exception to this attendance policy. Please contact the Disability Resource Center to determine what, if any, ADA accommodations are reasonable and appropriate.

Academic Credit

According to the federal definition of a Carnegie credit hour: A credit hour of work is the equivalent of approximately 60 minutes of class time or independent study work. A minimum of 45 hours of work by each student is required for each unit of credit. Credit is earned only when course requirements are met. One (1) credit hour is equivalent to 15 contact hours of lecture, discussion, testing, evaluation, or seminar, as well as 30 hours of student homework. An equivalent amount of work is expected for laboratory work, internships, practica, studio, and other academic work leading to the awarding of credit hours. Credit granted for individual courses, labs, or studio classes ranges from 0.5 to 15 credit hours per semester.

Academic Freedom

SUU is operated for the common good of the greater community it serves. The common good depends upon the free search for truth and its free exposition. Academic Freedom is the right of faculty to study, discuss, investigate, teach, and publish. Academic Freedom is essential to these purposes and applies to both teaching and research.

Academic Freedom in the realm of teaching is fundamental for the protection of the rights of the faculty member and of you, the student, with respect to the free pursuit of learning and discovery. Faculty members possess the right to full freedom in the classroom in discussing their subjects. They may present any controversial material relevant to their courses and their intended learning outcomes, but they shall take care not to introduce into their teaching controversial materials which have no relation to the subject being taught or the intended learning outcomes for the course.

As such, students enrolled in any course at SUU may encounter topics, perspectives, and ideas that are unfamiliar or controversial, with the educational intent of providing a meaningful learning environment that fosters your growth and development. These parameters related to Academic Freedom are included in SUU Policy 6.6.

Academic Misconduct

Scholastic honesty is expected of all students. Dishonesty will not be tolerated and will be prosecuted to the fullest extent (see SUU Policy 6.33). You are expected to have read and understood the current SUU student conduct code (SUU Policy 11.2) regarding student responsibilities and rights, the intellectual property policy (SUU Policy 5.52), information about procedures, and what constitutes acceptable behavior.

Please Note: The use of websites or services that sell essays is a violation of these policies; likewise, the use of websites or services that provide answers to assignments, quizzes, or tests is also a violation of these policies. Regarding the use of Generative Artificial Intelligence (AI), you should check with your individual course instructor.

Emergency Management Statement

In case of an emergency, the University's Emergency Notification System (ENS) will be activated. Students are encouraged to maintain updated contact information using the link on the homepage of the mySUU portal. In addition, students are encouraged to familiarize themselves with the Emergency Response Protocols posted in each classroom. Detailed information about the University's emergency management plan can be found at https://www.suu.edu/emergency.

HEOA Compliance Statement

For a full set of Higher Education Opportunity Act (HEOA) compliance statements, please visit https://www.suu.edu/heoa. The sharing of copyrighted material through peer-to-peer (P2P) file sharing, except as provided under U.S. copyright law, is prohibited by law; additional information can be found at https://my.suu.edu/help/article/1096/heoa-compliance-plan.

You are also expected to comply with policies regarding intellectual property (SUU Policy 5.52) and copyright (SUU Policy 5.54).

Mandatory Reporting

University policy (SUU Policy 5.60) requires instructors to report disclosures received from students that indicate they have been subjected to sexual misconduct/harassment. The University defines sexual harassment consistent with Federal Regulations (34 C.F.R. Part 106, Subpart D) to include quid pro quo, hostile environment harassment, sexual assault, dating violence, domestic violence, and stalking. When students communicate this information to an instructor in-person, by email, or within writing assignments, the instructor will report that to the Title IX Coordinator to ensure students receive support from the Title IX Office. A reporting form is available at https://cm.maxient.com/reportingform.php?SouthernUtahUniv

Non-Discrimination Statement

SUU is committed to fostering an inclusive community of lifelong learners and believes our university's encompassing of different views, beliefs, and identities makes us stronger, more innovative, and better prepared for the global society.

SUU does not discriminate on the basis of race, religion, color, national origin, citizenship, sex (including sex discrimination and sexual harassment), sexual orientation, gender identity, age, ancestry, disability status, pregnancy, pregnancy-related conditions, genetic information, military status, veteran status, or other bases protected by applicable law in employment, treatment, admission, access to educational programs and activities, or other University benefits or services.

SUU strives to cultivate a campus environment that encourages freedom of expression from diverse viewpoints. We encourage all to dialogue within a spirit of respect, civility, and decency.

For additional information on non-discrimination, please see SUU Policy 5.27 and/or visit https://www.suu.edu/nondiscrimination.

Pregnancy

Students who are or become pregnant during this course may receive reasonable modifications to facilitate continued access and participation in the course. Pregnancy and related conditions are broadly defined to include pregnancy, childbirth, termination of pregnancy, lactation, related medical conditions, and recovery. To obtain reasonable modifications, please make a request to title9@suu.edu. To learn more visit: https://www.suu.edu/titleix/pregnancy.html.

Disclaimer Statement

Information contained in this syllabus, other than the grading, late assignments, makeup work, and attendance policies, may be subject to change with advance notice, as deemed appropriate by the instructor.