FSC-20013 - Digital Forensics
Coordinator: Robert A Jackson Room: LJ1.16 Tel: +44 1782 7 33042
Lecture Time: See Timetable...
Level: Level 5
Credits: 15
Study Hours: 150
School Office: 01782 734921

Programme/Approved Electives for 2022/23

None

Available as a Free Standing Elective

No

Co-requisites

None

Prerequisites

None

Barred Combinations

None

Description for 2022/23


Aims
To provide an introduction to Digital Forensics including the following topics:
- Introduction to digital forensics
- Technical concepts computer hardware and software and definitions
- Labs and tools for carrying out digital forensics investigations
- Collecting evidence
- Specific systems Windows, Linux, Apple IOS
- Mobile devices
- Internet/E-mail/Social media
- Network forensics
- Multimedia forensics
- Anti-forensics
- Digital forensics and the law

Intended Learning Outcomes

explain the key technical concepts involved in digital forensics, including computer storage and memory in different environments, data types and file systems: 1,2
describe artifacts of operating systems, including vulnerabilities (concentrating on Windows as this is most encountered): 1,2
describe the digital forensics of mobile devices and how data can be recovered from them, and demonstrate how digital forensics methods can be applied to the internet, including e-mail and social networks: 1,2
give examples of how 'anti-forensics' methods are used to hide or destroy data, and discuss how the law is applied in digital forensics investigations: 1,2
research, prepare and present a group presentation on a topic of relevance to digital forensics: 1
discuss how digital forensics investigations are carried out and describe how evidence is collected using digital tools and appropriate software: 1,2

Study hours

20 content study hours (including Q&A sessions and drop-in sessions)
30 hours - preparation of group digital presentation
40 hours - working on independent case study
60 hours - independent study and class test completion

School Rules

Successful completion of CSC-10025 or FSC-10005

Description of Module Assessment

1: Group Presentation weighted 40%
Group Digital Presentation
Students will be divided into small groups (~4 students) and prepare a 30 minute digital presentation. Each student will make an individual contribution (~7-8 minutes) to the presentation, and their mark for the presentation will be a combination of self, peer and tutor assessment.

2: Case Study weighted 60%
Independent In-depth Case Study
Students will carry out an in depth case study individually on a topic allocated from those covered in the lectures. The case study will be presented in the form of a report (equivalent to ~3000 words) describing the case and the results and conclusions obtained.