Topics will be drawn from

- Introduction to forensics
- Digital forensics
- Approaches to digital forensics
- Data manipulation
- Malware
- Evidential processing and basic analysis techniques
- Legal, social and commercial impact
- Device forensics
- Network forensic, server forensic, hard disk forensic
- Data forensics
- File system analysis
- Professional reporting

The learning strategy for the module requires students to commit 150 learning hours, of this there will be 38 hours of class support and 112 hours of independent and self directed study.

Lectures/ lab work/ Presentations /Tutorial
Student managed learning/ directed learning

Apart from the lecture each week, various other methods as mentioned above will be used as learning strategies.
There will be laboratory and tutorial sessions, students will be required to discuss and present various topics of the module in the class. Students will be required to apply theoretical knowledge in practical contexts.
Students are expected to be able to structure their own work and to work relatively independently under the guidance of the module teaching staff.

An examination of 2 hr duration weighted at 100%.

Exam (Learning outcomes 1,2,3)

To pass this module student must obtain 40% marks. Re-assessment is capped at 40%

The VLE (NETED)
The Internet
Hardware laboratory
Appropriate Software
Word Processing software for use in the coursework
Printed and electronic journals.
Computer system and other devices' manuals

Casey E (2009), Handbook of Digital Forensics and Investigation, Academic Press
Carvey H (2009), Windows Forensic Analysis DVD Toolkit, Syngress,
Malin C et al (2009), Malware Forensics: Investigating and Analyzing Malicious Code

None