Task based assignment (3000 words) 100% - Learning outcomes 1-4.

Assignment will be based on a case study with the recovery, analysis and presentation of digital evidence.

Conducting a formal search
Identification of likely areas for evidence recovery
Analysis of digital media, tools and techniques used by forensic agencies
Introduction to standards of evidence handling
Responsibilities and duties of care to the investigator
Evaluation of computer systems
Presentation of evidence
Network activity monitoring and tracing.

Practical tasks and tutorials will be used to re-enforce and apply theory to encourage an analytical problem based approach to forensic investigation. 1 lecture and 2 practical per week
(1:n)1 (1;20)2

Nelson B, A. Phillips, et. al, Guide to Computer Forensics and Investigations, 2004, Thompson, ISBN: 0619131209

Sammes T, B. Jenkinson, Forensic COmputing: A Practitioners Guide, 2000, Springer-Verlag, ISBN: 1852332999

Dick, D, PC SUpport Handbook, 2003, Dumbreck, ISBN:095417111X
Good Practice Guide for Computer based evidence, version 3, Association of Chief Police Officers (ACPO) of England, Wales and Northern Ireland

Prior study of level 1 CE00868-1, Introduction to Forensic Tools and Techniques or equivalent.

G8_proposed_principles_for_forensic_evidence.html (available online)
http://www.ioce.org/ (accessed 2007)
Forensic tools set e.g EnCase, FTK
Sanitized cases accumulated by the Faculty