Las Positas College logo

Moh Daoud Computer Studies Website
Moh Daoud's Home page




Will a robot take your job?

Introduction To Operating Systems CNT 50 or CIS 65
operating systems

Linux/UNIX, CompTIA Linux+, LPI Cert. Course 7401
or CS 41
This course is offered online or in-person

Cloud Computing - Infrastructure CNT 7285
CompTIA A+/Dell/EMC/Amazon
Web Service (AWS) Foundations

Microsoft MCSA MCP Professional Cert..
CNT 57 Identity with Server 2016

mcsa logo mcsa logo

Cisco CCENT/CCNA1 CCNA1 Intro to Networking CNT 8001
This course is offered online or in-person

ccent logoccna logo  

Cisco Routing & Switching CCNA2 Course CNT 8002
This course is offered online or in-person

ccent logo ccna logo
CompTIA Network Security+ Course CNT 69
This course is offered online or in-person
Ethical Hacking and Penetration Testing Course CNT 7501
This course is offered online or in-person

CEH Training Videos on VTC Site ($39)

Digital Forensics, Intro to Computer Forensics Course CNT 68 .
hard disk
Ask the instructor about this program.
Classes at Chabot College
onine or in person

search for classes

Announcements for Students

New Degree 2016: Information Technologist

Best Free Software (not updated)

Rick Graziani Playlists of networking
videos on YouTube Cisco, IPv6,

Free Networking Videos by Prof. Messer

Free Security+ Videos by Prof. Messer
Free Networking Videos by ITFreeTraining
CompTIA Exams
Discounts for Students

Final Exam Schedule for all Classes (pdf)

hard disk

Course Description
A survey course in the detection, prevention and investigation of incidents involving computers and digital information, including cyber attacks and the use of computers to investigate crimes. The program will include introduction to computer forensics, incident response, methods of investigation, tracking persons and data, the secure analysis of hard drives and storage mediums, and IT security utilizing court-approved forensic software and tools.

The course covers forensics tools, methods, and procedures used for investigation of computers, techniques of data recovery and evidence collection, protection of evidence, expert witness skills, and computer crime investigation techniques. Includes analysis of various file systems and specialized diagnostic software used to retrieve data. Prepares for part of the industry standard certification exam, Security+, and also maps to the Computer Investigation Specialists exam.
Strongly recommended prerequisite: CNT 69 Network Security, or equivalent knowledge.

Face to face / Online hybrid
This class is being taught as an online/hybrid class. Online/Hybrid operation of this class and reduced in-class participation will be discussed during the first week. Online classes don't mean less work than face-to-face classes.

Text Book: Incident Response & Computer Forensics, Third Edition by by Jason Luttgens, Matthew Pepe, and Kevin Mandia. Publisher: McGraw-Hill Education. Sold by: Amazon Digital Services, LLC. ASIN: B00JFG7152
ISBN-10: 0071798684 - Kindle edition: $39, Paper edition: $17 (prices I saw on 4-10-16 at Amazon)
Buy from Amazon ($15 - $40). Or, McGraw-Hill/ online reading: Student Pricing, Starting at $62.00. Print ISBN: 9780071798686, 0071798684. eText ISBN: 9780071798693, 0071798692
Buy the online version from VitalSource
book cover
Publisher's Description
This bookn arms you with the information you need to get your organization out of trouble when data breaches occur. This practical resource covers the entire lifecycle of incident response, including preparation, data collection, data analysis, and remediation. Real-world case studies reveal the methods behind--and remediation strategies for--today's most insidious attacks. Included topics in this book: Architect an infrastructure that allows for methodical investigation and remediation; Develop leads, identify indicators of compromise, and determine incident scope; Collect and preserve live data; Perform forensic duplication; Analyze data from networks, enterprise services, and applications; Investigate Windows and Mac OS X systems; Perform malware triage; Write detailed incident response reports; Create and implement comprehensive remediation plans.
Optional Texts: Digital Library with student subscription of $ 19/year.
Optional Storage Device : 100 Gigabytes or more to copy software tools and disk images. Any large flash drive or portable disk will suffice.

Do your labs from home too!
NDG Netlab+
is a remote lab appliance (Netlab server) for IT training and distance learning, developed by Network Development Group. Because NETLAB+ equipment can be accessed from any PC and browser connected to the Internet, you can perform configuration tasks from virtually anywhere.
To log in, use your ID ___________and the initial password___________ .
Netlab Access:
netlab server in network pod_labeled

SLO - Student Learning Outcome
After successful completion of this course, students will be able to:
Outcome 1: Define and describe computer forensics investigations.
Outcome 2: Compare and contrast the various operating systems and file systems.
Outcome 3: Evaluate and choose appropriate software, hardware, and tools to equip a Forensics Lab.
Outcome 4: Retrieve and analyze data from a suspect's computer.
Outcome 5: Create investigative reports and act as an expert witness.
illustration illlustration

Online Counselors Online Counseling is an email-based service available to Las Positas students who live too far away from campus to meet with a counselor in person, including students taking online courses. This service is for Currently Enrolled/Registered Students (students with a W number)

Optional Online Orientation for new students
Students enrolled in online and hybrid courses are welcome to attend on-campus or live, virtual orientations held the week before the semester begins and during the first week of classes. These orientations are designed to familiarize you not only with Online Learning in general, but also with utilizing Blackboard. They are not course-specific.
For Fall 2015, the final orientation takes place Aug. 17 from 5:30-7 p.m. online. Learn how to access the online, virtual orientation.

Contact method for course work: Canvas course online.
Contact method for personal or immediate reply: Cell/text : _____________
Paper mail: Las Positas College, 3000 Campus Hill Drive, Livermore, CA 94551
Instructor Website:
This page can be found at --> Faculty & Staff button in mid screen --> Faculty Websites in the left column --> any link with the word (Daoud).

Office hours do NOT require appointments. Just show up at the place and time listed below.
Listed office hours are "official" office hours.
Contact me by text or email for other arrangements.
Monday Tuesday Wednesday Thursday Friday

Office Hour: 1:30 PM - 2:30 PM in Room 805 (Cisco Lab)

  1st Wed.: Town Hall Meeting: 2:30 - 4:30 pm.
3rd Wed.: Division Meeting: 2:30 - 4:30 pm.

 4th Fri.: Distance Education. Committe 10:00-12:00

CIS 65 Intro to Desktop Operating Systems CRN 20286 or CNT 50 CRN 20316 02:30 PM - 06:20 PM Room 805

Office Hours: 4:30 PM - 6:00 PM in Room 805 (Cisco Lab)

   Office Hours:
12:00-2:00PM PM in Room 805 (Cisco Lab)

CNT 7285 CRN 22724 Cloud Infrastructure- Amazon AWS Cloud Foundation Cert. + CompTIA Cloud+ Cert. Prep. 6:30-08:45PM Room 805

CNT 7401 CS 41 INTRO TO LINUX, UNIX, LINUX+ CRN 20628 or CIS 41, CRN 32440 6:30-8:50PM Room 805




Aug. 19 Fall semester classes begin. See the Schedule of Classes for late-start classes.
Aug. 19 - Sept. 2 Late enrollment for full-term classes – on a space available basis. Register online through CLASS-Web or in-person with add authorization number
Aug. 19 Associate Degree and/or Certificate of Achievement filing period begins through Oct. 26
Aug. 30 Last day to ADD/DROP with no Grade-of-Record - In Person (full-term classes)
Aug. 31 - Sept. 1 College closed - no Saturday/Sunday classes
Sept. 2 Labor Day - College Closed
Sept. 2 Last day to ADD/DROP with no Grade-of-Record - Online (full-term classes)
Sept. 3 CENSUS date (full-term classes only)
Sept. 20 Last day to request Pass/No Pass (full-term classes)
Oct. 22 FLEX Day (8:00am - 4:00pm)
Oct. 25 Deadline to apply for an Associate Degree and/or Certificate of Achievement
Nov. 8 Last day to WITHDRAW with a "W" - In Person (full-term classes)
Nov. 11 Last day to WITHDRAW with a "W" - Online (full-term classes)
Nov. 11 Veteran's Day - College Closed
Nov. 27 - 30 Thanksgiving recess – College closed (no Saturday/ Sunday classes)
Dec. 13 Last day of Instruction
Dec. 16 - 20 Final Examination Period
Dec. 21 - January 1, 2020 Winter Recess – No Instruction
Jan. 2, 2020 Instructors – Fall grades due by 11pm via CLASS-Web

Evaluation and Grading
Final grades are determined through a weighted average of midterm and final examinations, quizzes, laboratory assignments, homework assignments, and class attendance and participation.
90%+ = A; 80% to 89% = B; 70% to 79% = C; 60% to 69% = D; 59% & below = F. Posting of Grades: Final grades will be posted on the school website; usually within two weeks of the end of semester.
Late Coursework:
All assignments are to be turned in on the due date. Students may be allowed to make up any late work by prior arrangement with the instructor.

A GPA of 3.5 or higher, Minimum 12 units, and eligibility for English 1A
Benefits and opportunities you will have as an Honors student include:
An "Honors" transcript designation for each course in which you complete an honors project
The opportunity to do exciting and challenging coursework
The opportunity to work one-on-one with faculty
The opportunity to participate in the statewide community college honors research symposium held at either Stanford University or UC Berkeley each spring
Personalized counseling and preparation for transfer
The opportunity to collaborate with other honors students
Special honors recognition at graduation
Upon completion of at least six honors activities, access to transfer agreements with a number of universities
Interested? Go to

Parking Permits Available Online
Parking permits must be purchased on CLASS-Web. You will need the license number and description of the vehicle you wish to purchase a permit for and a printer to print your temporary permit. The actual hanging permit will be mailed to the address you provide when applying for your permit. Vehicles not displaying a valid permit, (hanging-type semester permit, temporary permit or daily permit from parking lot machines,) will be cited, even you own a parking permit. If you left it at home, you may buy a daily permit or contact the security office in building 1725 and ask for a temporary permit.
Permit Costs for Semester Permits. Vehicles: $40 per semester. Motorcycles: $30 per semester. Vehicles visiting: 30 minutes; free in marked spaces only.
Daily permit: $3 at the ticket machines on various parking lots.
Spaces for the handicapped: must show placard and pay the regular fee. Park your car head-in only. Do not park backwards, or you'll be cited. More info...
Receive a text message to your cell phone in case of an emergency at LPC.
will allow the school management to broadcast critical information, in real time, to the mobile devices of staff and students.
Text 55155 and type LPC.
Campus Security Office: 925 424 1690
Campus Security Emergencies: (925) 424-1699
*16 from Campus Pay Phones Emergency call-boxes
Adding/Dropping a course
You may use CLASS-Web on the Internet to drop or add a course from the school home page at . CLASS-Web is an online system that allows students to register, add, and drop classes, review academic schedules, check grades, view unofficial transcripts, access financial aid information, and pay student fees.
Remember! If you enroll in a class and decide not to attend, you are responsible for dropping the class. Don’t assume you will be dropped by your instructor or that the system will drop you automatically. If you fail to withdraw by the deadline the instructor must issue a grade.

Attendance - California Education Code (Title 5) on Excessive Absences
Due to the voluminous variety of knowledge required of professionals in information technology the industry, it is expected for you to attend every class session for the entire class time. Make arrangements with the instructors about hybrid classes. The Las Positas attendance policy will be observed: A student absent for a total of four consecutive or six cumulative instructional hours (1 instructional hour = 50 minutes) and/or two consecutive weeks of instruction may be dropped from that course by the instructor.
In order to be counted present, you must be present for the entire class period. If you need to leave a class session early, please inform me before class begins. Arriving to class late or leaving class early may result in at least one instructional hour of absence depending on the time
In the event that you experience a personal or familial hardship that causes an absence, you are till responsible for the material covered. Our online material has lectures that can assist in learning the many topics, and I am willing to help during contact hours. It is your responsibility to officially drop the course if you choose not to complete it.
If you wish to drop the course at any time for any reason, fill out the appropriate paperwork at the Office of Admissions and Records. Students who do not report to class on the first day may be dropped. Do not assume that I will drop you from the course. If you stop attending the class and do not drop the class after census day, you will receive an F in the class. See the schedule of important dates for deadlines for withdrawing from the course.
  Back to top

Classroom Etiquette
Cell phones should be either turned off or set to silent mode during class. Take your emergency calls outside the class room. Please, put away your smartphones, Ipods, mp3 player during class times. You may bring a laptop computer to class for class work only; not for playing games, chatting, reading the news, checking sports results, or watching funny videos.
During lectures, you are expected to participate. If you are sleepy or distracted, do not come to class. Lenghty texting is not participating. If you wear earphones during lectures, you are not participating. Whispering to the student sitting next to you is very distracting to your classmates and to the instructor.

Official Student Responsibilities and Behaviors
Student Conduct and Due Process

Missed Classes
The student is responsible for obtaining material distributed on class days when he/she was absent. This can be done by contacting a classmate who was present or by contacting the instructor.

Academic Honesty
All work that you submit in this course must be your own, it is a violation of academic integrity to copy someone else's work or to permit another person to copy your work. If any similarity in form or notation is noticed, the instructor retains the right to give a failing grade for the assignment, exam, and/or course.
Students found cheating (fraud, deceit, or dishonesty in an academic assignment) and/or plagiarizing (using another’s work as your own) will receive a zero for the assignment or exam and the incident will be reported to the dean of student services. LPC's policy on academic dishonesty can be found at

Need for Assistance
If you have any condition, such as a physical or learning disability, which will make it difficult for you to carry out the work as I have outlined it, or which will require academic accommodations, please notify me as soon as possible for special arrangements.
  Back to top

Saving copies of your class work
You may use a portable storage device to save your class materials..
Popular sites for computer parts: and
To locate the class PowerPoint presentations, notes and other student materials used in our class, do the following.
From any computer on campus, double click on the Student Files icon Marvin the Martian, double click on your instructor's folder, double click on your class folder.
If you don't see the Student Data icon, tap the Windows Start button, type \\marvin --> Enter.
Printing your work
This class rareley requires any printed work. Most materials may be submitted digitally. If you wish to print your work at school, you will need a computer print card, which can be purchased from the bookstore or from the Computer Lab (Room 803). - Color printing   is also available in Room 803- $.50 per page from PCs at pods L and M.

Resources, programs, and services available to Las Positas College students

Admissions and Records
(925) 424-1500
dearney @
Building 700
Applications • Registration • Records

Assessment / Tutorials and Testing
(925) 424-1475
ptrummel @
Building 1000
Tutors • Instructors • Placement Testing

Associated Students (ASLPC)
(925) 424-1490
staff @
Building 1700
Student Government • Meetings • Activities

(925) 424-1252
snavarro @
Room 2115
Intramurals • Intercollegiate Sports • Classes

(925) 424-1432
ktomlinson @
Building 900
Housing Scholarship • Child Care • CalWORKs Jobs

Career / Transfer Center
(925) 424-1423
Building 900
Career Testing • Career Information • Transfers

Computer Center
(925) 424-1144
gjohns @
Room 803

Early Childhood Education
(925) 424-1187
(925) 424-1135
Room 2136
Training • Professional Development

English Center
cahre @
Building 400
Developmental English • Instructors/Staff

(925) 424-1593
dscott @
Room 1504
Book Grants • Priority Registration • Counseling

Financial Aid/Veteran's Office
(925) 424-1580
lpcfinaid @
Room 1509
Registration Fee Waivers • Grants • Loans

(925) 424-1151
Building 2000
Reference • Research Skills Instruction • Internet Access • Online Databases • Print and AV Materials

LPC Distance Education Support
(925) 371-1142
LPCdistEd @
Login Problems • Assignment Submission Problems • General Distance Ed Info

Peer Support Network
(925) 424-1217
ejones @
Room 1200
Support Groups • Trained Listeners • Stress Help

Re-Entry Student Services
(925) 424-1412
bmorrissey @
Room 704
Transitional Classes • Counseling • Support

Student Health Center
(925) 424-1830
Building 1700
Treatment • Advice • Referrals

Campus Safety and Security
Emergency (925) 424-1699
Business (925) 424-1690
Room 1605
Parking• Student Escorts • Lost and Found

 Back to top
The Computer Center (room 803) is available to students as an open lab with Internet-connected computers and technical support from assistants on site. The Lab is equiped with over a hundred PCs and Macs, printing (color too), headphones, scanners, assistive technology, on a drop-in basis.
The Computer Center supports all disciplines including Online Learning courses.
Hours: Monday-Thursday 7:30am-9:30pm. Friday 8:30am-3:00pm
LPC Library Databases: Articles in Magazines, Journals, Newspapers, and Reference Sources

Free Microsoft Software and Discounted Non Microsoft Software
- The MSDN Academic Alliance/MS Imagine offers free MS software to LPC students who are enrolled in computing and business classes. The list of software packages is HERE.
- or, both take you to the same deals. offers both Microsoft and non Microsoft products, some at an 85% discount. At JourneyEd registration, sign up as a Chabot student using the same W number.
- Free Microsoft Office 365:
Sign up using an OR email address as a username at:
More info found at Student Life section of LPC website:
- The Microsoft Student Store is here .
- An alternative to obtain access to free Microsoft Imagine (Former DreamSpark) is to join the Association for Computing Machinery ( Student cost: $19/year. As part of the membership you get access to most of the MSDNAA catalog. You also get access to hundreds of books and white papers.
- for more free stuff.
- Best Free Software - Compiled by the instructor
 Back to top

Class Schedule and Course Outline

Wk Date Lecture, demos on NetLab SANS GCFE Areas ISC2 CCFP Domain EC-Council CHFI
Thur., Jan. 19 Orientation. Syllabus. Meet your classmates and instructor.
Chapter 1: Real-World Incidents
What Constitutes an Incident?

What Is Incident Response?
Where We Are NowMore...

Exploring the Windows File System
Netlab Site
illustration 4: Digital Forensics 7: Understanding Hard Disks and File Systems
Thur., Jan. 26 Chapter 2: IR Management Handbook
What Is a Computer Security Incident?
What Are the Goals of Incident Response?
Who Is Involved in the IR Process?
Exploring the Linux File System
Netlab Site
illustration 4: Digital Forensics 7: Understanding Hard Disks and File Systems
Thur., Feb. 02 Chapter 3: Pre-Incident Preparation
Preparing the Organization for Incident Response
Identifying Risk More...
Introduction to Partitions (MBR & GPT)
Netlab Site
4: File and Program Activity Analysis 4: Digital Forensics 8: Windows Forensics
  Fri., Feb. 03 February 3 Last day to “ADD” or “DROP NGR” (in-person) (Full-term courses) illustration    
Thur., Feb. 09 Chapter 4: Getting the Investigation Started on the Right Foot
Collecting Initial Facts
Checklists More...
Forensic Acquisition Using Linux Tools
Netlab Site
3: Evidence Acquisition, Preparation, and Preservation 2: Investigations 9: Data Acquisition and Duplication
Thur., Feb. 16 Chapter 5: Initial Development of Leads
Defining Leads of Value
Acting on Leads
Turning Leads into Indicators More...
Obtaining and Analyzing Memory
Netlab Site
2: Digital Forensics Fundamentals 4: Digital Forensics
Thur., Feb. 23 Chapter 6: Discovering the Scope of the Incident
What Should I Do?
Examining Initial Data
Gathering and Reviewing Preliminary Evidence More...
Linux OS Artifact Forensics
Netlab Site
illustration 7: Understanding Hard Disks and File Systems
Thur., Mar. 02 Chapter 7: Live Data Collection
When to Perform a Live Response
Selecting a Live Response Tool
What to Collect
Collection Best Practices More...
Windows OS Artifact Forensics
Netlab Site
4: File and Program Activity Analysis 4: Digital Forensics 8: Windows Forensics
Thur., Mar. 09 Chapter 8: Forensic Duplication
Forensic Image Formats
Complete Disk Image
Partition Image
Logical Image More...
Windows Registry Forensics
Netlab Site
6: System and Device Profiling and Analysis 4: Digital Forensics 8: Windows Forensics
Thur., Mar. 16 Chapter 9: Network Evidence
The Case for Network Monitoring
Types of Network Monitoring More...
Web Browser Forensics
Netlab Site
1: Browser Forensics
  Thur., Mar. 23 Spring Break        
Thur., Mar. 30 Chapter 10: Enterprise Services
Network Infrastructure Services
LANDesk Software Management Suite
Symantec Altiris Client Management Suite More...
Network Forensics
Netlab Site
7: User communication Analysis 4: Digital Forensics 16: Network Forensics, Investigating Logs and Investigating Network Traffic
      Introduction to Autopsy Netlab Site
      Introduction to Digital Forensics Framework Netlab Site    
Thur., Apr. 06 Chapter 11: Analysis Methodology
Define Objectives
Know Your Data
Where Is Data Stored?
What’s Available? More...
Data Carving
Netlab Site
illustration 5: Application Forensics 10: Recovering Deleted Files and Deleted Partitions
  Mon., Apr. 17 Deadline to apply for Degree/Certificate.
Last day to Withdraw with a "W" (in-person and online via CLASS-Web) (Full-term courses)
Thur., Apr. 13 Chapter 12: Investigating Windows Systems
NTFS and File System Analysis
The Master File Table
INDX Attributes More...
Email Forensics
Netlab Site
7: User communication Analysis 5: Application Forensics 19: Tracking Emails and Investigating Email Crimes
Thur., Apr. 20 Chapter 13: Investigating Mac OS X Systems
HFS+ and File System Analysis
Core Operating System Data More...
Netlab Site
illustration 13: Steganography and Image File Forensics
Thur., Apr. 27 Chapter 14: Investigating Applications
What Is Application Data?
Where Is Application Data Stored?
Windows; OS X; Linux More...
Introduction to Android OS
Netlab Site
4: Digital Forensics 20: Mobile Forensics
Thur., May 04 Chapter 15: Malware Triage
Malware Handling
Triage Environment
Static Analysis More...
Android Logical Acquisition
Netlab Site
4: Digital Forensics 20: Mobile Forensics
Thur., May 11 Chapter 16: Report Writing
Why Write Reports?
Reporting Standards More...
Recovering Passwords
Netlab Site
14: Application Password Crackers
Thur., May 18 Chapter 17: Remediation Introduction
Basic Concepts
Remediation Pre-Checks
Form the Remediation Team More...
Log Analysis
Netlab Site
5: Log Analysis 16: Becoming an Expert Witness
Thur., May 25 Final Exam (Full-term courses) 7:30 PM - 9:20 PM in Room 805        
  Mon., May 29 HOLIDAY - Memorial Day    







 LPC HomeLPC Library 
3000 Campus Hill Drive Livermore CA 94551-7623 | Tel. 925.424.1000 | Fax 925.443.0742
Copyright © 2019. All Rights Reserved.
Please address questions and comments to the Webmaster.