ITC597 Digital Forensics

This subject provides an in-depth study of the rapidly changing and fascinating field of computer forensics. It combines both the technical expertise and the knowledge required to investigate, detect and prevent digital crimes.

Objectives

Upon successful completion of this subject, students should:

• be able to argue the legal and ethical considerations for investigating and prosecuting digital crimes;
• be able to develop a digital forensics process;
• be able to select and evaluate the technology in digital forensics to detect, prevent and recover from digital crimes;
• be able to analyse data on storage media and various file systems;
• be able to collect electronic evidence without compromising the original data;
• be able to evaluate the functions and features of digital forensics equipment, the environment and the tools for a digital forensics lab;
• be able to identify technical tactics used in the preparation and planning of digital crimes and the cybertrails they leave;
• be able to analyse the steps involved in a digital forensics investigation and to prepare reports on the results of investigations.

Syllabus

The subject will cover the following topics:

• Relevant legislations and code of ethics
• Digital crimes, civil and crime law
• Computer forensics and digital detective
• Forensics processes, policies and procedures
• Fraud and forensic accounting
• E-Discovery, guidelines and standards
• E-Evidence, tools, environments and equipments
• Systems basics and file systems
• Investigating operating systems
• Email and web forensics
• Network forensics and intrusion detection
• Reporting and presenting

Assessment Information

Please note that the information above should be used as a guide only as the actual content of subjects is changed regularly to reflect the latest industry trends and student feedback.