Digital Forensics

It offers a disciplined approach to implementing and evaluating a comprehensive computer forensic investigation plan with a focus on being able to detect computer users and abusers and collect evidence to discover what actions they took. The aim of the course is to provide the student with the ability to carry out and critically evaluate computer forensic investigations and appraise forensic software with a view to developing appropriate investigation strategies in the light of emerging digital technologies. By the end of this module the student should be able to decide and evaluate plans for a forensic investigation including a critical evaluation of the tools to be used; to enable the graduate to plan, undertake and report upon sound digital forensic analysis in a team context.

The aims of this course are:

• To provide students with a clear understanding of digital forensics, from its relatively recent emergence as a sub-discipline of forensics to its rapidly growing importance alongside the more established forensic disciplines.
• To gain a clear understanding of the role of digital forensics practitioners and their vital work in cybercrime and corporate environments, where they recover evidence of criminal offences and civil transgressions.

Upon the successful completion of this course, students should be able to:

• describe the role of digital forensics in criminal investigations, corporate investigation and auditing, and IT security operation.
• explain how data are stored on a local computer, remotely on the Internet, and also the general structures of the local computer and the Internet.
• apply current industry best-practices to the analysis of digital evidence when given some hypothetical and real case scenarios.
• undertake basic digital forensic investigation, from data acquisition and validation to evidence discovering, analyzing, validating, and presenting, by using a variety of digital forensics tools.
• further strengthen important generic skills, such as communication, analysis and inquiry, problem solving, independent and group working, and professionalism and social responsibility.

Textbooks:

1. Guide to Computer Forensics and Investigations, 5^th Edition, by Nelson B.et.al

References:

1. The Basics of Digital Forensics: The Primer for Getting Started in Digital Forensics, First Edition, 2012
2. Handbook of Digital Forensics and Investigation, Eoghan Casey, First Edition, 2005