Syllabus for CYB-321



Digital Forensics Techniques and Practices explores foundational concepts, tools, and techniques of digital forensics investigations and investigates the violations of company policies, loss of proprietary information, and cybercrimes from a forensics perspective. The goal is to employ appropriate forensic response techniques to support investigations of cyber incidents involving various digital technologies;

apply forensic best practices to the collection, handling, and analysis of digital evidence; and report technical and investigative findings in an accurate and ethical manner.



After completing this course, you should be able to:

CO1        Demonstrate the use of various forensic tools.

CO2        Conduct digital investigations from the initial recognition of an incident through the steps of evidence gathering, preservation, and analysis.

CO3        Analyze major components of the NTFS and EX2 file systems and associated forensic artifacts. 

CO4        Discover the latest trends in digital forensics including IoT, mobile, cloud, SSD, and virtual machine forensics.

CO5        Explore the rules, laws, policies, and procedures that affect digital forensics. 

CO6        Prepare reports that describe the technical procedures used in forensic investigations.


You will need the following materials to do the work of the course. The required textbook is available from the University’s textbook supplier, MBS Direct.

Required Textbook

ISBN-13: 978-1285060033

Note about Infosec Learning Labs: In completing your coursework, you will be using Infosec Learning Labs, a virtual platform that contains interactive labs, which provide you with a real-world application and hands-on learning experience to practice various cybersecurity skills and concepts.

To access the labs, visit the Infosec section of the course website. When you click the Infosec Learning Labs link in your course for the first time, you will be redirected to an account setup page. You will be asked for some basic information to create your account and then make a payment. The price covers all labs needed for this course and access for six months.


Digital Forensics Techniques and Practices is a three-credit, online course consisting of six modules with five discussion forums, six practices exercises, six quizzes, four Infosec Learning Labs, and a final project. Modules include an overview, topics, learning objectives, study materials, and activities. Module titles are listed below.


For your formal work in the course, you are required to participate in online discussion forums and complete practice exercises, module quizzes, and Infosec Learning Labs. You will also complete a final project. See below for details.

Consult the Course Calendar for due dates.

Promoting Originality

One or more of your course activities may utilize a tool designed to promote original work and evaluate your submissions for plagiarism. More information about this tool is available in this document.

Discussion Forums

You are required to participate in five discussion forums. The discussion forums are designed to encourage you to discuss the module topics with your classmates. In order to successfully complete the discussion forums, you need to address all items included in the forum, reply to peers thoughtfully, add value to the discussion, and apply ideas, insights, or concepts from scholarly sources, assigned readings, lectures, course materials, or other relevant sources. Replies such as “Good post” or “I agree” will not count toward your grade; your post should add value to the class.

Practice Exercises

You are required to complete six practice exercises. The practice exercises are on a variety of topics associated with the course modules. Grading rubrics for these exercises can be found in the Evaluation Rubrics folder.


You are required to take six quizzes, one per module. All quiz items are multiple choice and you may use any materials that you like in taking the quizzes. There is no time limit for taking each quiz.

Most students find that quiz-taking is an excellent way to be sure they are mastering basic concepts and terminology. You will be able to take each quiz an unlimited number of times, and the gradebook will record your most recent score.


This arrangement will allow you to go back and reread portions of the text that you need to review and then take the quiz again for further practice.

Again, your gradebook will record your most recent score.

Infosec Learning Labs

You are required to complete and submit results for four Infosec labs for this course. Each lab is either 90 minutes or 120 minutes in duration, regulated by a timer. They are designed to be completed in one sitting to simulate a real experience, so you cannot save your progress to return later. For an optimal experience, use a Chrome web browser with an Internet connection to run the labs. While completing each lab, take a screenshot toward the end. Submit both the screenshot and your lab reflection to your mentor using the appropriate “Infosec Lab Results” link in Moodle. Your mentor will review your submissions and give you credit for each completed activity. Be sure to reference the Course Calendar for due dates.

Please see the Infosec Learning Labs section of the course website for further details and instructions.

Final Project

You are required to complete a final project for this course. Please see the Final Project section of the course website for further details. A grading rubric for the final project can be found in the Evaluation Rubrics folder.


Your grade in the course will be determined as follows:

All activities will receive a numerical grade of 0–100. You will receive a score of 0 for any work not submitted. Your final grade in the course will be a letter grade. Letter grade equivalents for numerical grades are as follows:






























Below 60

To receive credit for the course, you must earn a letter grade of C or better (for an area of study course) or D or better (for a course not in your area of study), based on the weighted average of all assigned course work (e.g., exams, assignments, discussion postings).


First Steps to Success

To succeed in this course, take the following first steps:

Study Tips

Consider the following study tips for success:


Thomas Edison State University is committed to maintaining academic quality, excellence, and honesty. The University expects all members of its community to share the commitment to academic integrity, an essential component of a quality academic experience.

Students at Thomas Edison State University are expected to exhibit the highest level of academic citizenship. In particular, students are expected to read and follow all policies, procedures, and program information guidelines contained in publications; pursue their learning goals with honesty and integrity; demonstrate that they are progressing satisfactorily and in a timely fashion by meeting course deadlines and following outlined procedures; observe a code of mutual respect in dealing with mentors, staff, and other students; behave in a manner consistent with the standards and codes of the profession in which they are practicing; keep official records updated regarding changes in name, address, telephone number, or e-mail address; and meet financial obligations in a timely manner. Students not practicing good academic citizenship may be subject to disciplinary action including suspension, dismissal, or financial holds on records.

All members of the University community are responsible for reviewing the Academic Code of Conduct Policy in the University Catalog and online at

Academic Dishonesty

Thomas Edison State University expects all of its students to approach their education with academic integrity—the pursuit of scholarly activity free from fraud and deception. All mentors and administrative staff members at the University insist on strict standards of academic honesty in all courses. Academic dishonesty undermines this objective. Academic dishonesty can take the following forms:


Thomas Edison State University is committed to helping students understand the seriousness of plagiarism, which is defined as using the work and ideas of others without proper citation. The University takes a strong stance against plagiarism, and students found to be plagiarizing are subject to discipline under the academic code of conduct policy.

If you copy phrases, sentences, paragraphs, or whole documents word-for-word—or if you paraphrase by changing a word here and there—without identifying the author, or without identifying it as a direct quote, then you are plagiarizing. Please keep in mind that this type of identification applies to Internet sources as well as to print-based sources. Copying and pasting from the Internet, without using quotation marks and without acknowledging sources, constitutes plagiarism. (For information about how to cite Internet sources, see Online Student Handbook > Academic Standards > Citing Sources.)

Accidentally copying the words and ideas of another writer does not excuse the charge of plagiarism. It is easy to jot down notes and ideas from many sources and then write your own paper without knowing which words are your own and which are someone else’s. It is more difficult to keep track of each and every source. However, the conscientious writer who wishes to avoid plagiarizing never fails to keep careful track of sources.

Always be aware that if you write without acknowledging the sources of your ideas, you run the risk of being charged with plagiarism.

Clearly, plagiarism, no matter the degree of intent to deceive, defeats the purpose of education. If you plagiarize deliberately, you are not educating yourself, and you are wasting your time on courses meant to improve your skills. If you plagiarize through carelessness, you are deceiving yourself.

For examples of unintentional plagiarism, advice on when to quote and when to paraphrase, and information about writing assistance, click the links provided below.

Examples of Unintentional Plagiarism

When to Quote and When to Paraphrase

Writing Assistance at Smarthinking

Disciplinary Process for Plagiarism

Acts of both intentional and unintentional plagiarism violate the Academic Code of Conduct.

If an incident of plagiarism is an isolated minor oversight or an obvious result of ignorance of proper citation requirements, the mentor may handle the matter as a learning exercise. Appropriate consequences may include the completion of tutorials, assignment rewrites, or any other reasonable learning tool in addition to a lower grade for the assignment or course. The mentor will notify the student and appropriate dean of the consequence by e-mail.

If the plagiarism appears intentional and/or is more than an isolated incident, the mentor will refer the matter to the appropriate dean, who will gather information about the violation(s) from the mentor and student, as necessary. The dean will review the matter and notify the student in writing of the specifics of the charge and the sanction to be imposed.

Possible sanctions include:

Copyright © 2019 by Thomas Edison State University. All rights reserved.