Introduction to Digital Forensics - CIS2204

Assessment 1: Written practice exercise

Ungraded exercises will be set, and answers and solutions to the problems will be provided.

Written practice exercise

Assessment 1: Written Assignment

A written report presenting an investigation plan of a case whereby an individual is suspected of storing and sharing IIOC data. The plan provides step-by-step details on how digital forensics team will carry out the investigation along with the technical demonstration of forensic tools, considering advantages and limitations of the selected approach(s).

Written Assignment

<p>In this module you will explore the fundamentals of Digital Forensics (DF), mainly focusing on Computer Forensics. The module establishes the underlying standards, principles, guidelines and best practices of modern digital investigations, also covering the use of latest commercial and open-source DF tools. This highly hands-on module provides you with significant theoretical and practical skills to apply DF in real-world scenarios. Using specialist forensic tools and techniques, you will be taught how to identify, preserve, extract, examine and analyse digital evidence in a forensically sound manner. Furthermore, you will be taught how to write forensic reports associated with the findings and present evidence in a court of law. All these are essential for a career as a Digital Forensic Expert.</p>

School of Computing and Engineering

<p>https://library.hud.ac.uk/readinglists/CIS2204</p>

Computing and Information Systems

CIS2204 - Introduction to Digital Forensics

Introduction to Digital Forensics

Discuss and analyse the principles and core concepts underpinning the discipline of DF.

Develop an understanding of DF guidelines, standards, the legal framework, and the expected level of ethical, legal and professional responsibilities required of DF practitioners.

Research and apply knowledge of the tools, techniques and best practices associated with DF to a range of problems to identify and acquire digital evidence from storage media.

Illustrate technical abilities to understand common file system and memory structures and carry out forensic analysis using various tools and techniques.

Produce forensic reports based on acquired digital evidence which articulate and communicate the expert opinion and technical analyses to a non-expert audience.

Investigate key locations in operating systems, such as Thumbnail Cache, Internet Browsing History, Windows Registry and Network, to identify and extract evidential artefacts.