Assignment 100% (Learning outcomes 1, 2, 3 and 4).
The assignment will be scenario based. The student will be required to evaluate the use of Forensic Computing tools and techniques within a given legal framework/case/scenario and produce a 3000 word report identifying their recommendations and observations.

This module covers the main aspects and concepts of forensic computing considering the topic in relation to individual and networked computer systems. In particular it will address:
An overview and introduction to forensic tools
Computer systems architecture and infrastructure
Internet, intranet, extranet, individual machines, organiser devices, mobile phones, and other mobile computing systems
Media and storage - file storage systems, media such as hard disks, network storage, Zip and floppy formats etc.
Files - deleted files, hidden files, monitoring processes, encryption issues, viruses and hacking
Watermarks, steganography, criminal activity tracking, logging, and packet sniffing
Data recovery and audit trails
Firewalls and protection
Intrusion and Intrusion detection

The material will be presented through a combination of lectures, tutorials, practical exercises and directed self-study as appropriate for each topic. Related to teaching you will receive 2 lectures and 1 tutorial session per week.
(1:n)2 (1:20)1

Nelson B, A. Phillips, et. al, Guide to Computer Forensics and Investigations, 2004, Thompson, ISBN: 0619131209
Sammes T, B. Jenkinson, Forensic Computing: A Practitioners Guide, 2000, Springer-Verlag, ISBN: 1852332999
Dick, D, PC Support Handbook, 2003, Dumbreck, ISBN: 095417111X
Good Practice Guide for Computer Based Evidence, Version 3, 2005, Association of Chief Police Officers of England, Wales and Northern Ireland.

None

Net Analysis and Encase software
High power PC, additional hardware such as hard drives and cradle
Access to the internet
Library