Requisites: AND Pre-requisite: Knowledge of essential computer architecture such as memory, operating systems, binary and hexadecimal numbers. AND Pre-requisite: [Module CSN07105] Computer Systems

12. Module ContentThe aim of the module is to investigate the principles of digital forensics, focusing on computer forensics (client-side PCs and laptops). The module includes significant practical sessions in applying computer forensics in realistic real-world scenarios, allowing students to analyse and evaluate digital evidence through the use of forensic tools and techniques. The tools examined will be mainly public domain tools. The practicals will be complemented with considerable theoretical knowledge of computer information as digital evidence and the basic techniques associated with gathering, preserving and presenting digital evidence. Outlines of the main areas include:? Introduction to concepts of Computer Forensics and Digital Forensics with respect to digital evidence? Introduction to principles involved in Digital Forensic investigations? Ethical and professional issues related to Digital Forensics? Introduction to forensic techniques used in the examination of end-devices covering boot disks, file systems, system registry, timeline of events, web browsers, email, log files, etc.?Introduction to open-source forensic tools (e.g. Autopsy).

Upon completion of this module you will be able to

LO1: Discuss the principles of computer and digital forensics.

LO2: Conduct a digital forensic investigation in an ethical and professional manner.

LO3: Evaluate digital evidence obtained during forensic investigations using forensic tools.

LO4: Develop an understanding of relevant digital forensic literature and quality information sources.