FSC-20013 - Digital Forensics
Coordinator: Rob Jackson Room: LJ1.16 Tel: +44 1782 7 33042
Lecture Time: See Timetable...
Level: Level 5
Credits: 15
Study Hours: 150
School Office: 01782 734921

Programme/Approved Electives for 2023/24

None

Available as a Free Standing Elective

No

Co-requisites

None

Prerequisites

None

Barred Combinations

None

Description for 2023/24


Aims
To provide an introduction to Digital Forensics including the following topics:
- Introduction to digital forensics
- Technical concepts computer hardware and software and definitions
- Labs and tools for carrying out digital forensics investigations
- Collecting evidence
- Specific systems Windows, Linux, Apple IOS
- Mobile devices
- Internet/E-mail/Social media
- Network forensics
- Multimedia forensics
- Anti-forensics
- Digital forensics and the law

Talis Aspire Reading List
Any reading lists will be provided by the start of the course.
http://lists.lib.keele.ac.uk/modules/fsc-20013/lists

Intended Learning Outcomes

explain the key technical concepts involved in digital forensics, including computer storage and memory in different environments, data types and file systems: 1,2
describe artifacts of operating systems, including vulnerabilities (concentrating on Windows as this is most encountered): 1,2
describe the digital forensics of mobile devices and how data can be recovered from them, and demonstrate how digital forensics methods can be applied to the internet, including e-mail and social networks: 1,2
give examples of how 'anti-forensics' methods are used to hide or destroy data, and discuss how the law is applied in digital forensics investigations: 1,2
research, prepare and present a group presentation on a topic of relevance to digital forensics: 2
discuss how digital forensics investigations are carried out and describe how evidence is collected using digital tools and appropriate software: 1,2

Study hours

20 content delivery hours (including Q&A sessions and drop-in sessions)
30 hours - preparation of group digital presentation
40 hours - working on independent case study
60 hours - independent study and class test completion

School Rules

Successful completion of CSC-10025 or FSC-10005

Description of Module Assessment

1: Case Study weighted 40%
Independent In-depth Case Study
Students will carry out an in depth case study individually on a topic allocated from those covered in the lectures. The case study will be presented in the form of a report (equivalent to ~2000 words) describing the case and the results and conclusions obtained.

2: Group Presentation weighted 60%
Group Digital Presentation
Students will be divided into small groups (~4 students) and prepare a 30 minute digital presentation. Each student will make an individual contribution (~7-8 minutes) to the presentation, and their mark for the presentation will be a combination of self, peer and tutor assessment.