Computer Forensics is the chain of detection, identification, collection, preservation, analysis and presentation of digital evidence acceptable to a court of law. This course will provide a complex set of activities requiring not only an understanding of the theory of sophisticated information and communications technologies and an experience of their practical uses, but also a grounding in other disciplines, notably the law and legal process. Graduates will be able to analyze a data processing device to determine whether it has been used for illegal, unauthorized or unusual activities and set up appropriate automatic monitoring.

Ideal For: Business executives, managers, accountants, computer auditors, Lawyers, government officials, law enforcement agents, IT strategists, intellectual property providers, computer security professionals, system administrators, and researchers & developers in information security, and digital evidence areas.

Entry Requirements

•  A Bachelor's degree in Computer Science or

•  Equivalent Education but with relevant work experience in an IT environment. And it is advantageous if the student has training in networking and A+.

•  Reasonable command of spoken and written English

The course develops:

• An understanding of computer forensics tools, investigation and analysis
• A working knowledge of hardware and operating systems to maximise success on projects and the necessary skills to develop a security program that will protect data and react to threats posed by Internet users etc.

Course Content

The course considers and addresses:

• the critical evaluation of a variety of tools available on the open market, using forensic tools to retrieve data from electronic sources;
• the analysis of professional and ethical issues relating to computer forensics; and

• the development of professional competencies, such as report writing and presenting evidence in court.

 

CF 1. Introduction to Computer Forensics
Chapter 1	1.1	This introductory module introduces the computer forensics discipline
	1.2	Discussing its importance, practice, role and scope
	1.3	The key defining issues and ideas of real day working experience.
CF 2. Fundamentals of Computer Systems Forensics
Chapter 2	2.1	Basics for software forensic investigation.
	2.2	Characteristics of a software system that yields digital evidence,
	2.3	Information gathering, recovery and identifying the use of malware
CF 3. Crime Scene Investigation
Chapter 3	3.1	Crime scene search and different types of evidence.
	3.2	Handling evidence after seizing
	3.3	Objective evaluation of need to maintain a chain of custody.
	3.4	Importance of proving the authenticity of evidence.
CF 4. Computer Forensics Technology
Chapter 4	4.1	Technologies involved in Computer Forensics
CF 5. Expert Witness Requirements
Chapter 5	5.1	Introduction to expert witness
	5.2	Compiling an investigation report and present findings in a Law court.
	5.3	Presenting evidence and dealing with questions (enhanced course)
CF 6. Data Recovery and Analysis
Chapter 6	6.1	Introduction to systematically recover data
	6.2	Techniques of recover data
	6.3	Analyzing recover data information content
CF 7. Computer Forensics Tools
Chapter 7	7.1	Tools to manage data recovery and analysis and presenting digital evidence.
CF 8. Computer Forensics Profession
Chapter 8	8.1	Nature of the Computer Forensics profession and the important external factors that may influence the work of a practitioner.
CF 9. Advanced Computer Forensics
Chapter 9	9.1	Advanced recovery and analysis of digital forensic data.
	9.2	Hardware and software areas within the entire/outside organization examined for digital evidence.
	9.3	New and future systems, techniques for forensic recovery and analysis.
CF 10. Research Methods
CF 11. Computer Forensics Project

Programme Learning Outcomes:

 

• promote public awareness of, and debate about, the social need for and technical challenge of Computer Forensics;

 

• develop Computer Forensics as an appropriate vehicle of postgraduate academic study;

 

• enable students to develop as confident and reflective Computer Forensics practitioners able to work independently and to a professional standard;

 

• participate in professional networking within an emerging Computer Forensics community and facilitate students' introduction to this;

 

• foster research within the field of Computer Forensics, and enable students to carry out further study and independent academic or practice-based research.