Module Code CSN07401
Examples of Equivalent Learning Knowledge of essential computer architecture such as memory, operating systems, binary and hexadecimal numbers.

12. Module Content

The aim of the module is to investigate the principles of digital forensics, focusing on computer forensics (client-side PCs and laptops). The module includes significant practical sessions in applying computer forensics in realistic real-world scenarios, allowing students to analyse and evaluate digital evidence through the use of forensic tools and techniques. The tools examined will be mainly public domain tools. The practicals will be complemented with considerable theoretical
knowledge of computer information as digital evidence and the basic techniques associated with gathering, preserving and presenting digital evidence. Outlines of the main areas include:
? Introduction to concepts of Computer Forensics and Digital Forensics with respect to digital evidence
? Introduction to principles involved in Digital Forensic investigations
? Ethical and professional issues related to Digital Forensics
? Introduction to forensic techniques used in the examination of end-devices covering boot disks, file systems, system registry, timeline of events, web browsers, email, log files, etc.
?Introduction to open-source forensic tools (e.g. Autopsy).

Upon completion of this module you will be able to
LO1: Discuss the principles of computer and digital forensics
LO2: Conduct a digital forensic investigation in an ethical and professional manner
LO3: Evaluate digital evidence obtained during forensic investigations using forensic tools
LO4: Develop an understanding of relevant digital forensic literature and quality information sources.