Module Descriptors
LEGAL AND EVIDENTIARY ASPECTS OF FORENSIC COMPUTING
COCS60393
Key Facts
Faculty of Computing, Engineering and Sciences
Level 6
15 credits
Contact
Leader: Rob Shaw
Email: R.Shaw@staffs.ac.uk
Hours of Study
Scheduled Learning and Teaching Activities: 24
Independent Study Hours: 126
Total Learning Hours: 150
Assessment
  • EXAMINATION - UNSEEN IN EXAMINATION CONDITIONS weighted at 50%
  • ASSIGNMENT weighted at 50%
Module Details
Module Additional Assessment Details
Exam 50% - length 2 hours - testing Learning outcomes 1,2 & 3
Task based assignments 50% testing Learning outcomes 3 and 4.
Module Texts
Prosise, C., & Mandia, K., (2003), Incident responses and computer forensics, Osborne Mc Grow Hill, ISBN: 007222696X
Stephenson, P., Investigating Computer Related Crime, CRC Press, 2000, ISBN: 0849322189
Module Special Admissions Requirements
Prior study of CE00371-4, Introduction to Software Development or equivalent and CE00396-4, Object Oriented and Event Driven Programming or equivalent and prior study of CE00315-5, Professional and Enterprise Development or equivalent.
Module Resources
Fastbloc Field Edition
Encase Forensic Tools
Vogon, Net analysis or similar software
Module Learning Strategies
Practical tasks and tutorials will be used to re-enforce and apply theory to encourage an analytical and problem based approach. Observance of legal, social and ethical issues will need to be demonstrated throughout. 18 lecture hours and 6 tutorial hours.
Module Indicative Content
Legal context and structures.
Forensic laboratroy set up.
Digital evidence controls.
Processing crime and incident scenes.
Writing investigation reports.
Expert testimony.

PC fundamentals and component handling
Operating systems
Data storage
Access controls and encryption
Data recovery
Forensic investigation and evidence handling