This unit provides a broad coverage of digital ICT forensics. You will examine definitions of evidence as they apply to investigations involving the seizure and examination of information technology devices. The unit will introduce you to various tools, techniques and algorithms that may be employed by investigators for acquisition, preservation and analysis of evidence. Disk-based (local) and network (remote) forensic environments will be explored. You will also learn of the impediments and complicating factors that can threaten forensic investigations.
Minimum total expected workload to achieve the learning outcomes for this unit is 144 hours per semester typically comprising a mixture of scheduled online and face to face learning activities and independent study. Independent study may include associated reading and preparation for scheduled teaching activities.
Explain the motivations and landscape of forensic investigations in an IT context;
Demonstrate how digital forensics can be employed by Police and Tax officials in a court of law.
Explain the relevant legal definitions and frameworks that apply to digital forensic investigations;
Report on forensic findings in a clear and concise manner.
Select appropriate tools and algorithms to perform forensic investigations and acquire relevant evidence;
Apply and evaluate forensic techniques in local media-based an network-based environments;
