Curriculum for Digital Forensics

Get hands-on learning from the first semester, covering digital forensics, cybersecurity, and mobile device analysis. Study abroad options available.

Computer & Digital Forensics Curriculum

In our nationally recognized program, you’ll start learning computer and digital forensics right away. You’ll work on projects and labs, like our Leahy Center for Digital Forensics & Cybersecurity, to gain real-world skills. You’ll specialize in forensics, cybersecurity, and the analysis of digital devices. Our core courses will broaden your knowledge, and you can even study abroad without falling behind in your major.

Learning Outcomes for Computer & Digital Forensics

First Year
Fall Semester
Spring Semester
Second Year
Fall Semester
Spring Semester
Third Year
Fall Semester
- FOR 330 Operating System Forensics II
- SCI 170 Forensic Science, Introduction to
- XXX Program Elective
- COR 301 Core Foundations: Connecting Place and Identity
- COR 302 Field Methods
Spring Semester
- FOR 350 Malware Analysis & Incident Response
- FOR 370 File System Forensics
- XXX Program Elective
- COR 303 Core Foundations: Connecting Past and Present
- COR 304 Digital Methods
Fourth Year
Fall Semester
- CCC 410ITS Capstone Design
- FOR 440 Network Forensics and Threat Hunting
- FOR 450 Malware Analysis & Reverse Engineering
- XXX Program Elective
- XXX General Elective
Spring Semester
- CCC 412 ITS Capstone Senior Project
- FOR 480 Digital Forensic Practicum
- XXX Program Elective
- XXX Program Elective
- XXX General Elective

Provides a comprehensive analysis of the fundamentals of substantive criminal law. Students will learn the essential elements of crimes and the rationale underlying criminal law. The nature of jurisdiction, the criminal act, the criminal state of mind and matters affecting responsibility for criminal conduct are included. (Fall only)

Prerequisites
Credits	3

Students in this course will be presented concepts from white collar and cyber crime arena. The topics may include identify theft, fraud, cyber terrorism, hacking, cyber bullying, child pornography and sexual exploitation, testimony, civil and criminal litigation. Students will learn best practices with hands-on experience in identifying and preserving digital evidence.

Prerequisites
Credits	3

This course will introduce students to operating system concepts and other forms of systems software. Students will learn about standard operating systems functional components such as memory, process/thread, file system, input/output, storage and device management. Additional topics include data representation, imaging, virtualization, and the history/future of systems software. Hands-on experiential learning will be used to reinforce concepts.

Prerequisites
Credits	3

Why go to college? What does it mean to be educated? In this course you'll begin to answer these questions. We'll explore the academic expectations of higher education, college as a diverse community, and the significance of education around the world. By examining how these issues are negotiated and implemented at Champlain and elsewhere, you'll gain perspective on your own education and a deeper understanding of the ways that the college experience can be both liberating and transformative.

Prerequisites	Take Cor-102 concurrently.
Credits	3

Inquiry is about learning how to ask the right kinds of questions, and figuring out how to answer those questions through discussion and reflection. This course introduces you to the types of inquiry necessary to succeed at Champlain and beyond. You will explore the intersections of reading, writing, and thinking by focusing on a specific topic or theme. You will approach that focus through the interrogation of relevant texts and analysis that draws upon multiple analytical frameworks. For detailed descriptions of the individual sections of this course, cut and paste the following link into your browser: bit.ly/core-year-one

Prerequisites	Take COR-101 concurrently.
Credits	3

This course will examine digital forensics as it relates to both civil and criminal investigations. The course content includes best practices in examining and reporting on digital evidence. Students will be exposed to current technologies and methods as well as leading edge techniques with practical based projects. Students will utilize various popular commercial and free/open-source tools to test and cross-validate results.

Prerequisites	Complete FOR-100 with a minimum grade of C.
Credits	3

Teaches a statistical approach to decision making under uncertainty. Topics are descriptive statistics, probability distributions, inferential statistics, confidence intervals, hypothesis testing, linear regression and correlation.

Prerequisites
Credits	3

Students will be introduced to networking technology and the integral part it plays in business and society. Organizations expect the communication in information systems will be reliable, effective, and secure. Topics include network protocols, services, and topologies, information security, high-speed LAN/WAN topologies, client-server technology, security vulnerabilities, network troubleshooting Students will gain factual, conceptual, and applied knowledge regarding network communications, security, technology evolution, infrastructure components, management functions, business processes, and design issues.

Prerequisites
Credits	3

What makes an argument good or bad? What counts as evidence in our post-truth world? How can you understand and assess the truth value of a claim when you're not an expert? In this course you'll learn rhetorical strategies about how to examine arguments and types of evidence in different disciplines and fields of study. To help learn these strategies, you will do close readings of texts from a variety of disciplines in the liberal arts and sciences, popular culture, and social media.

Prerequisites	Take COR-104 concurrently.
Credits	3

This course introduces you to interdisciplinary inquiry using applied, project-based, and/or experiential methods. Regardless of the specific course focus, you'll have opportunities for making and doing interdisciplinary knowledge creation through a variety of approaches and activities. You will collaborate with other students, iterate on ideas, and work to develop a project. For detailed descriptions of the individual sections of this course, cut and paste the following link into your browser: bit.ly/core-year-one

Prerequisites	Take Cor-103 concurrently.
Credits	3

Students will learn the history and basics of computing as well as the fundamentals of Python programming. General topics include: the history of computing, number systems, Boolean logic, algorithm design and implementation, and modern computer organization. Programming topics include: memory and variables, data types, mathematical operations, basic file I/O, decision-making, repetitions, functions, and list basics.

Prerequisites
Credits	3

In this course, students will learn basic computer organization and operating system functions. The course will cover Processes, Threads, CPU Scheduling, Process Synchronization, Memory Management, Virtual Memory, and Disk Management. Finally, the students will be introduced to System Security, Networking and Virtualization.

Prerequisites	FOR-120 with C or better
Credits	3

This course provides an introduction to computer and data network security. Students will examine the rationale and necessity for securing computer systems and data networks, as well as methodologies for implementing security, security policies, best current practices, testing security, and incident response.

Prerequisites	Complete SEC-110 or FOR-100 with grade of C or better
Credits	3

Science holds an elevated place in society. The knowledge and meaning that science makes are seen as having a particular and special value. This course explores knowledge and meaning making in order to allow a thoughtful analysis of, and then engagement with, science as a way of knowing, and then engages with the methods and theories of the sciences themselves, to understand the analytical, creative, and generative possibilities of science.

Prerequisites	Take COR-101, COR-102, COR-103, COR-104.
Credits	3

While each section of COR 202 addresses a different problem, issue, or topic, they all focus on interdisciplinary research. You will collect, analyze, and assess information from different disciplines in order to recognize patterns, contextualize arguments and synthesize ideas while collaborating on a project. Emphasis will be placed on helping you translate and apply what you learn about interdisciplinary research to other professional contexts. For detailed descriptions of the individual sections of this course, cut and paste the following link into your browser: bit.ly/core-year-two

Prerequisites	Take COR-101, COR-102, COR-103, COR-104.
Credits	3

Computer evidence (digital evidence) is being used every day in our country to convict criminals of crimes ranging from possession of child pornography to embezzlement to murder. Every competent, modern law enforcement officer understands the significance of digital evidence in every case submitted for prosecution. Students will be required to learn, and apply, legal principles that govern how this vital evidence is recovered (and used) to insure that it will be legally admissible in court.

Prerequisites	Complete CRJ-120 OR 30 credits
Credits	3

This course continues the material from Python Programming beginning with lists and basic structures. Then, the focus moves toward Object-Oriented Programming (OOP) that includes topics such as objects, classes, encapsulation, abstraction modularity, memory management, inheritance, and polymorphism. Advanced Python language features like iterators, generators, lambdas, and comprehensions are also covered.

Prerequisites	Complete CSI-160
Credits	3

This course explores more advanced topics and methodologies for examining digital evidence. Topics taught in this class include File System Forensics, Computer Operating System Forensics and Mobile Device Forensics. Students are challenged to work individually and in groups to examine and prepare detailed reports showing the relevance of digital evidence to mock cases. This course presents a higher level of technical detail and will balance theory and hands-on aspects for conducting digital forensic examinations.

Prerequisites	Complete FOR-120 with a grade of C or better
Credits	3

Culture impacts everything we do, experience, and learn, but what is culture? Where does it come from, how does it form, and why does it have such a wide and deep impact on people's lives? This course explores culture as a system of meaning and meaning-making in order to allow for a more thoughtful analysis of, and then engagement with, cultural texts and media using different methodological approaches.

Prerequisites	Take COR-101, COR-102, COR-103, COR-104.
Credits	3

In this course, you will go in depth about a theoretical perspective that asks you to interrogate systems of power and power relationships. You will learn about the history of that perspective, including how it too was shaped by multiple contexts and compares with other viewpoints. You will use that perspective to analyze a specific topic, collection of texts, or cultural phenomena. For detailed descriptions of the individual sections of this course, cut and paste the following link into your browser: bit.ly/core-year-two

Prerequisites	Take COR-101, COR-102, COR-103, COR-104.
Credits	3

This course dives into more advanced topics related to operating system forensics such as encryption, sandboxes, telemetry data, different system processes, and cloud applications. The course will also cover many user and system artifacts on various operating systems, such as but not limited to Linux and Mac. Students will conduct complex examinations by correlating between artifacts found on different operating systems in order to reconstruct a timeline of events that happened.

Prerequisites	FOR-230 with C or better
Credits	3

Students learn the biology, genetics, chemistry and physics involved in the forensic investigation of crimes. A wide range of topics are studied including DNA, entomology, fingerprinting, trace evidence, serology, blood spatter, and chemical analysis of drugs alcohol, and other compounds. Students apply their new knowledge of forensic science through the use of case studies and laboratories. This course includes two laboratory hours per week.

Prerequisites
Credits	4

Where we are shapes how we understand ourselves and each other. In this course, we will dig into the relationship between place and identity. We will learn how to think spatially, recognizing how one's identity is situated within and constructed through movement through different spaces--be they natural and built environments, rural and urban, or actual and virtual. COR 301 will help us understand the complex meanings of identity in a world defined by movement and change.

Prerequisites	Take COR-101, COR-102, COR-103, COR-104, COR-201, COR-202, COR-203, COR-204
Credits	3

Field methods are a collection of practices used in the sciences, arts, and humanities to understand phenomena in situ or as it is happening in a specific time and place. In this course, we will apply one or more field methods to research a topic, theme, or question that varies by section. We will learn practices associated with research in the field including but not limited to participant observation, data collection, and experimentation in order to navigate an uncontrolled environment. We will also examine the power dynamics between the researcher, informant, and subject matter to help us understand how, if not practiced ethically, field methods can create or reinforce biases rather than helping us learn with and make sense of the world around us. For detailed descriptions of the individual sections of this course, cut and paste the following link into your browser: bit.ly/core-year-three

Prerequisites	Take COR-101, COR-102, COR-103, COR-104, COR-201, COR-202, COR-203, COR-204
Credits	3

Students will learn various techniques to study malware working with real commodity malware as well as specially crafted advanced malware. We study various techniques of malware propagation, methods of detection-evasion and how to respond to a malware outbreak. Students will learn how to acquire system memory and forensically analyze memory dumps. Finally, students will learn about best practices and techniques for responding to security incidents.

Prerequisites	(FOR-230 with C or better) OR (Complete (NET-225, SEC-250 and NET-255) with a grade of C)
Credits	3

File systems are the underlining structures of hardware systems and are used as a method of storing and organizing computer files and their data. Students will gain a practical knowledge of the elements of digital forensics as it relates to parsing and understanding file system structure and use.

Prerequisites	FOR 230 with C or better & any intro level programming class (CSI 1xx)
Credits	3

By learning from the past, we can make sense of the present and prepare for the future. In this course, we will learn how the 21st century has been and continues to be shaped by past social practices, ethical frameworks, power relations, and discourses. COR 303 is a course about how we know what we know about the past, and the ways different narratives about the past shape the present. Making connections between past and present will help us better understand how to live and make decisions in a globalized world defined by constant change.

Prerequisites	Take COR-101, COR-102, COR-103, COR-104, COR-201, COR-202, COR-203, COR-204
Credits	3

Digital methods are widely used forms of inquiry that employ technological tools to interrogate research questions important to the humanities and sciences (including the social sciences). Some examples include digital archiving, data mining, and story mapping. In this course, we will use one or more digital methods or tools to research a topic, theme or question that varies by section, with the express purpose of critiquing and reflecting on its application. This includes an examination of the values, flaws, and impacts of the methods or tools we are using, paying particular attention to their ethical implications and power dynamics. For detailed descriptions of the individual sections of this course, cut and paste the following link into your browser: bit.ly/core-year-three

Prerequisites	Take COR-101, COR-102, COR-103, COR-104, COR-201, COR-202, COR-203, COR-204
Credits	3

A senior-level seminar during which students research, design and plan a technical capstone project. Throughout the semester, students will demonstrate their ability to identify a research problem and solution that draw on their theoretical and practical training in their academic major and that can be executed in one academic semester. To be taken concurrently with CCC-411, ITS Capstone Reflective Component.

Prerequisites	ITS majors only and 90 completed credits.
Credits	2

An organization's network is always at risk of being compromised. Students will learn how to find threats and eliminate them by mastering the practical and theoretical aspects of traffic analysis and network forensics as it applies to enterprise investigations. Students will collect and analyze of evidence from different network sources such as firewalls, routers, DNS & DHCP services, Host/Network IDS, and logs. Starting with basic network packet capture analysis, detection of abnormal activity, and covert communication channels to lateral movement, students will apply Threat Hunting to follow the footprints of a threat actor.

Prerequisites	Complete FOR-350 or SEC-350 with a C or better.
Credits	3

This course covers advanced techniques used by malware and how to statically and dynamically analyze them, such as but not limited to: fileless malware, malicious documents, packed, obfuscated, anti-analysis, and different process injection methods. Students will learn how to dissect by reverse engineering and debugging malware samples. The course will cover how code injection and hooking are used by malware to leverage persistence.

Prerequisites	FOR-350 with C or better
Credits	3

A senior-level seminar during which students implement and verify a technical capstone project specific to their major discipline that they have researched and designed under the supervision of their principal faculty member. Completed projects will be fully documented and presented in writing and orally to appropriate audiences.

Prerequisites	Complete CCC-410ITS with a grade of C or better.
Credits	3

The digital forensic practicum provides students the opportunity to apply their academic learning, practical experience and acquired skills in an environment closely resembling a real world setting, working on cases that represent a comprehensive understanding of digital forensics.

Prerequisites	Complete FOR-230 with a grade of C or better.
Credits	3

Information for...

Are you looking for...

Curriculum for Digital Forensics

Computer & Digital Forensics Curriculum