Module Indicative Content
This module covers the main aspects and concepts of forensic computing considering the topic in relation to individual and networked computer systems. In particular it will address:
An overview and introduction to forensic tools
Computer systems architecture and infrastructure
Internet, intranet, extranet, individual machines, organiser devices, mobile phones, and other mobile computing systems
Media and storage - file storage systems, media such as hard disks, network storage, Zip and floppy formats etc.
Files - deleted files, hidden files, monitoring processes, encryption issues, viruses and hacking
Watermarks, steganography, criminal activity tracking, logging, and packet sniffing
Data recovery and audit trails
Module Additional Assessment Details
Coursework - 100% assessing Learning Outcomes 1 - 4 and comprising an assessed report, with a word limit of 3,000 words. The report must be of a professional standard demonstrating critical and applied understanding of cybercrime and forensic analysis.
Module Learning Strategies
The module will be delivered in accordance with the pedagogy and practice of distance learning. Material will be structured in an accessible form in accordance with a governing Learning Activity Plan. Appropriate use of online material and mechanism will be used, such as: the Discussion Board within the Blackboard VLE, use of VLE-based groups for peer support/discussion - the forums will allow discussion with a student's peer group as well as the module tutor, use of e-materials (study notes, the online library, and multimedia learning resources). Teleconference support will be provided, typically via Skype, or Telephone. Students will work through the module material provided on the VLE at a pace suggested within the VLE for the module. The material will include activities and review questions that allow students to assimilate the concepts and skills required by the module. Students will be encouraged to discuss relevant aspects within discussion forums that are part of the VLE.
Module Resources
Digital Forensics Software (EnCase, FTK, NetAnalysis)
Sanitized cases accumulated by the Faculty
Module Texts
Windows Forensics Analysis, Carvey H, 2009, Syngress, ISBN: 978-1-59749-9
Guide to Computer Forensics and Investigations, Nelson B, A. Phillips, et. al, 2010, Thompson, ISBN: 1435498836
Forensic Computing: A Practitioners Guide, Sammes T, B. Jenkinson, Second Edition 2010, Springer-Verlag, ISBN: 184996596X
Windows Forensic Analysis DVD Toolkit, Carvey, H, 2nd Edition 2010, Syngress, ISBN: 9781597494229
Module Special Admissions Requirements
None