Digital Forensics - CMS3507

Assessment 1: Other

Learners will undertake a series of formative exercises in the practical sessions. Feedback, advice and guidance will be provided for these exercises.

Other

Assessment 2: Written draft

There will be a separate opportunity for formative feedback on draft assignment work during the module.

Written draft

Assessment 1: Written Assignment

A written report presenting an investigation plan of a senior employee who has left the company for a major rival company. The plan covers all stages of a digital forensics investigation from data collection to reporting digital evidence, along with justifying the selected approach based on technical advantages and determining possible challenges.

Written Assignment

<p>Digital Forensics (DF) is the process of identifying, acquiring, analysing and reporting on digital evidence (DE) used in a wide range of investigations. Digital Forensic Investigations (DFIs) have a variety of applications, being used in civil, administrative, and criminal proceedings in pursuit of DE. A typical DFI would involve the investigation of crimes such as hacking, digital espionage, counter-terrorism and possession of illegal imagery, etc. The aim of this module is to provide you with the knowledge and critical understanding of the key concepts in Digital Forensics. Through this module, you will be taught how to identify, preserve, extract and analyse digital evidence in a forensically-sound manner and report on your findings. Furthermore, this module will equip you with practical skills in applying specialised forensic tools, such as FTK Imager and Autopsy, and techniques, such as data carving and file system analysis, to a specific application scenario.</p>

School of Computing and Engineering

<p>https://library.hud.ac.uk/readinglists/CMS3507</p>

Computing and Information Systems

CMS3507 - Digital Forensics

Digital Forensics

Critically analyse digital evidence and produce forensic reports based on acquired DE which articulate and communicate the expert opinion and technical analyses to a non-expert audience.

Critically assess various forensic tools and methods used to identify, extract and analyse evidence from a variety of sources and the subsequent reporting of DE.

Demonstrate knowledge and understanding of the key concepts underpinning the field of DF.

Critically evaluate and justify the selection and application of forensic tools, techniques and processes used in a particular domain of DF to identify and acquire evidence from a variety of sources.

Discuss best practices, legal framework, and the expected level of ethical, legal and professional responsibilities in DF.

Synthesise and apply knowledge of forensic tools, methods and best practices to a wide range of DFI scenarios.