Course description
Introduction
Computer Forensics is the chain of detection, identification, collection, preservation, analysis and presentation of digital evidence acceptable to a court of law. This course will provide a complex set of activities requiring not only an understanding of the theory of sophisticated information and communications technologies and an experience of their practical uses, but also a grounding in other disciplines, notably the law and legal process. Graduates will be able to analyse a data processing device to determine whether it has been used for illegal, unauthorised or unusual activities and set up appropriate automatic monitoring.
Course Content
The course considers and addresses:
- the critical evaluation of a variety of tools available on the open market, using forensic tools to retrieve data from electronic sources;
- the analysis of professional and ethical issues relating to computer forensics; and
- the development of professional competencies, such as report writing and presenting evidence in court.
- Core modules:
- Advanced Computer Forensics
- Computer Forensics Project
- Computer Forensic Technology
- Computer Forensic Tools
- Crime Scene Investigation
- Data Recovery and Analysis
- Expert Witness Requirements
- Fundamentals of Computer Systems Forensics
- Introduction to Computer Forensics
- Research Methods
- The Computer Forensics Profession
Teaching and Assessment
Teaching will take the form of lab-based sessions, student-led tutorials and lectures involving both internal staff and guest speakers from industry. Assessments will be carried out mostly through coursework, of either a practical or research-based nature, and through in-class tests. Assessments will be timed to enable formative and summative feedback throughout the course. Access to module teaching materials, links to resources and tools, and other course related information are web-based wherever possible.