CGS 5132: Computer Forensics II

Instructor: Dr. S. Lang 207 ENG III (Harris Center) (407) 823-2474 lang@cs.ucf.edu Office Hours: Tues: 3 - 4 pm; Thur: 2 - 4 pm	Teaching Assistant: Susan Li Harris Eng Center sli@cs.ucf.edu

Announcements:
(April 24, 2007) The final exam (test #2) available on WebCT until 8 pm on Monday, April 30. (April 23, 2007) Comments on the final exam posted under Test Info link. (April 20, 2007) Notes on Wireless Security and Forensics posted. (April 19, 2007) Question 3(7)(f) on Assignment #5 revised and reposted. (April 17, 2007) Test #2 information and notes on WIndows print artifacts, firewall, and email investigation, posted. (April 10, 2007) Final project/assignment posted. (April 9, 2007) Question 3 of Assignment #4 revised, and reposted. (April 5, 2007) Assignment #4 (complete version) posted. (April 3, 2007) Notes on Network Intrusion Detection and Intrusion Incident Response posted. Detective Troell of OPD will present a guest lecture on Response to a Network Intrusion Incident. (March 28, 2007) Notes on Network Packet Sniffers and Assignment #4 posted. (March 27, 2007) Notes on Networks and the Internet posted. (March 23, 2007) Notes of Dr. Lee's lectures on History of Computing and Malicious Codes posted. (March 9, 2007) Assignment #3 (revised and complete version) posted. No class on March 13 (UCF's spring break). Dr. Joohan Lee will be the guest lecturer for March 20's class. There will be no lab hours during the weeks of March 12 - 23. (March 7, 2007) Assignment #3 (incomplete version) posted. (March 6, 2007) There is a 5-point curve on Test #1 (i.e., add 5 points to your current test score). No class on March 13 due to spring break; Dr. J. Lee of EECS will be the guest lecturer for March 20's class. (March 6, 2007) Notes on Windows Processes, File System, and Security posted. (Feb. 27, 2007) Notes on Windows Registry (Topic 5.3) and comments on Assignment #1 Questions (Topic 2.1) posted. (Feb. 24, 2007) Test #1 information posted at http://www.cs.ucf.edu/courses/cgs5132/spr2007/test.html. (Feb. 21, 2007) Comments related Assignment #2. First, make sure you have read the posted document .Linux Forensics. to learn about installing TSK/Autopsy. Also, go to the TSK website http://www.sleuthkit.org/ and familiarize yourself with various functions provided by TSK, as described in the page http://www.sleuthkit.org/autopsy/desc.php and illustrated by their screenshots. Note that Question 3(f) has been changed and new instructions are given in the revised assignment posted on WebCT. Finally, the due date has been extended to 11 pm on Sunday, 2/25. (Feb. 20, 2007) Notes on EFS and password-protected files and the use of FTK/PRTK posted. (Feb. 19, 2007) Notes on Linux Forensics reposted with additional comments added for Cygwin users. (Feb. 15, 2007) Assignment #2 (complete and revised version) posted. (Feb. 14, 2007) Notes on Linux Forensics Tools posted (Feb. 13, 2007) Notes on Authentication/Digital Signatures posted. (Feb. 6, 2007) Assignment #2 (incomplete version) and Notes on Number Theory and RSA Algorithm posted. (Feb. 2, 2007) Assignment #1's due date extended to 11 pm on Sunday, Feb. 4. (Jan. 31, 2007) Slight revision added to Assignment #1 (i.e., in Question 2(a)(3), a user's passowrd needs to be at least 6 characters) (Jan. 30, 2007) Notes on Cryptography posted. (Jan. 29, 2007) Tomorrow's class (1/30) will be held in the Lab, Rm. 315 on the third floor. (Jan. 24, 2007) Lab 315 is available for use on both Wednesday (1/24) and Thursday (1/25), from 6 to 9 pm. Bring your Helix CD to the lab. (Jan. 23, 2007) The complete version of Assignment #1, a short Linux QA document, and information about Lab 315's PC, posted under the Homework link. (Jan, 16, 2007) Assignment #1 (incomplete version) posted. (Jan. 14, 2007) Notes for Topics 1 and 2 posted on WebCT. (Jan. 9, 2007) The class meets at 6 pm today in Rm. 102 of the NCFS Building. Directions to the building can be found at http://www.ncfs.org/directions.html.