FSC-20013 - Module Specification
School of Chemical and Physical Sciences
Faculty of Natural Sciences

Programme/Approved Electives for 2021/22

Available as a Free Standing Elective

Co-requisites

None

Prerequisites

None

Barred Combinations

None

Description for 2021/22

This module provides an introduction to the subject of Digital Forensics, which is becoming increasingly important now that computers and mobile devices are frequently a subject of criminal investigations. It will cover basic technical concepts, labs and tools for carrying out forensic investigations, how evidence is collected, specific issues with Windows operating systems, mobile devices, internet and social media, multimedia forensics and how the law currently applies to digital forensics. As well as lectures and workshops, the students will prepare a group digital presentation.

To provide an introduction to Digital Forensics including the following topics:
- Introduction to digital forensics
- Technical concepts ¿ computer hardware and software and definitions
- Labs and tools for carrying out digital forensics investigations
- Collecting evidence
- Specific systems ¿ Windows, Linux, Apple IOS
- Mobile devices
- Internet/E-mail/Social media
- Network forensics
- Multimedia forensics
- Anti-forensics
- Digital forensics and the law

Intended Learning Outcomes

explain the key technical concepts involved in digital forensics, including computer storage and memory in different environments, data types and file systems: 1,2
describe artifacts of operating systems, including vulnerabilities (concentrating on Windows as this is most encountered): 1,2
describe the digital forensics of mobile devices and how data can be recovered from them, and demonstrate how digital forensics methods can be applied to the internet, including e-mail and social networks: 1,2
give examples of how 'anti-forensics' methods are used to hide or destroy data, and discuss how the law is applied in digital forensics investigations: 1,2
research, prepare and present a group presentation on a topic of relevance to digital forensics: 1
discuss how digital forensics investigations are carried out and describe how evidence is collected using digital tools and appropriate software: 1,2

Study hours

20 content study hours (including Q&A sessions and drop-in sessions)
30 hours - preparation of group digital presentation
40 hours - working on independent case study
60 hours - independent study and class test completion

School Rules

Successful completion of CSC-10025 or FSC-10005

Description of Module Assessment