Fundamentals of digital forensics

Description

The subject provides students with the formation of theoretical knowledge and practical skills in the investigation of security incidents and the implementation of digital forensics processes. within the subject, the basic concepts, types and principles of digital forensics, as well as the processes of identification, collection, documentation, storage, protection, analysis and presentation of digital evidence are studied. students are introduced to forensic investigation techniques on disks and file systems, windows and linux systems, deleted files, image and log files, network traffic, and memory (ram). also considered are forensic analysis of web attacks, mobile devices, email, cloud and virtual environments, as well as incident response. application features of open-source and commercial tools used for obtaining and analyzing digital evidence are explored. the subject also covers legal and ethical issues of digital forensics, investigative reporting and presentation in court.

Course learning outcomes

1. 1

   CLO 1: Must understand the role and importance of forensic computer science/digital forensics, know its types, understand and apply research methods.

2. 2

   CLO 2: Must be able to distinguish digital evidence that has evidentiary value, understand their types and importance.

3. 3

   CLO 3: Must learn the procedural basics of identification, collection, documentation, storage, use, preservation and presentation of digital evidence.

4. 4

   CLO 4: Must acquire knowledge and skills in using the necessary resources and equipment to identify, collect, document, store, use, protect and present digital evidence, as well as be able to apply open source and advanced solutions.

5. 5

   CLO 5: Must be able to perform forensic diagnostics of digital evidence, evaluate results obtained and formulate conclusions.

6. 6

   CLO 6: Must know the necessary legal procedures and requirements to ensure the availability of evidence