General Course Information
- University: Tafila Technical University
- College: College of Information Technology and Communication
- Department: Computer Science
- Course Title: Digital Forensics
- Course Code: 0603331
- Level of Course: Third-Year Students
- Semester: Current 2025-2026
- Credit Hours: 3 (3+0)
- Course Type: Required
- Mode: On Campus (Face-to-Face)
- Prerequisites: Cryptography (0603230), Operating Systems (0602331)
Instructor Information
- Name: Dr. Yazan A. Alsariera
- Academic rank: Associate Professor
- Email: [email protected]
- Office Hours:
- To be announced (TBA) according to the instructor’s weekly office schedule.
Course Description
This course provides a comprehensive introduction to the field of Digital Forensics. It focuses on the principles, methodologies, and tools used in digital forensic investigations, covering both theoretical foundations and practical applications.
Students will examine computer hardware, digital media, storage formats, data acquisition and validation techniques, forensic analysis methodologies, and network traffic analysis. The course also emphasizes legal considerations, ethics, professionalism, and incident response standards relevant to modern digital forensic practice.
Learning Materials
- Primary materials and references are provided within the course lecture slides.
- Supplementary readings may be assigned throughout the semester.
Course Learning Outcomes (CLOs)
- Describe key concepts, terminology, and components of digital forensics including hardware, storage media, and data acquisition.
- Apply forensic methodologies and tools to acquire, analyze, and validate digital evidence in a forensically sound manner.
- Analyze network traffic and incident data while adhering to legal, ethical, and professional standards.
CLOs – Student Outcomes Mapping
| CLO | SO1 | SO2 | SO3 | SO4 | SO5 |
|---|---|---|---|---|---|
| CLO 1 | ✓ | ||||
| CLO 2 | ✓ | ||||
| CLO 3 | ✓ |
Topics Covered
| Week | Topic | CLO |
|---|---|---|
| 1 | Basic Computer Skills for Digital Forensics | 1 |
| 2 | Introduction to Digital Forensics | 1 |
| 3 | Understanding the Computer Forensic Process | 1 |
| 4 | The Investigator’s Office and Laboratory | 1 |
| 4 | Data Acquisition | 1 |
| 5 | Processing the Crime Scene | 1 |
| 6 | Working with Windows Systems | 1 |
| 7 | Forensic Analysis and Validation | 1 |
| 8 | Recovering Graphics | 2 |
| 9 | Email Forensics | 1 |
Class and Laboratory Schedule
Weekly Structure:
- 4 lecture sessions per week (60 minutes each)
- 1 laboratory session per week (120 minutes)
Class Section
- To be announced (TBA) according to in the university’s official course schedule ( TTU course schedule e-Portal ).
Grading Plan
| Assessment | Points | Details |
|---|---|---|
| Mid Exam | 30 | Written exam (TBA) including Lab midterm |
| Course Work & Labs | 40 | Quizzes (10%), Lab Reports (20%), Final Lab Project as Lab Final Exam (10%) |
| Final Exam | 30 | Written exam (TBA) |
General Notes
- All examinations are closed-book.
- Exams are based on lecture materials, slides, instructor explanations, notes, and handouts.
- All homework, reports, and project submissions must be completed individually.
- Plagiarism, verbatim copying, or duplicate submissions will result in disciplinary action.
Relationship to Program Outcomes (ABET – Criterion 3)
| Outcome | Weight | Description |
|---|---|---|
| SO1 | 3 | Analyze complex computing problems and identify solutions. |
| SO2 | 3 | Design, implement, and evaluate computing-based solutions. |
| SO3 | — | Communicate effectively in professional contexts. |
| SO4 | — | Recognize professional and ethical responsibilities. |
| SO5 | — | Function effectively as a member or leader of a team. |