Digital Forensics

Aim

To provide learners with a comprehensive understanding of digital forensic principles and the collection, preservation, and analysis of digital evidence.

Learning Outcomes

On successful completion of this course, the learner will be able to:

1. Identify the attributes of file systems and storage media and perform analysis on at least two common file systems
2. Identify and analyse potential sources of electronic evidence
3. Describe the importance of maintaining the integrity of digital evidence
4. Perform basic forensic data acquisition and analysis using computer and network-­based applications and utilities
5. Accurately document forensic procedures and results and develop a case summary

Indicative content

• Forensic investigation
• Operating system functionality
• File system analysis
• Operating system artefact analysis
• Browser and email analysis
• Investigative methodologies
• Forensic report writing
• Overview of memory forensics