Digital Forensics and Investigation Methods (2 Units R: LH 15; PH 45)

Course Contents

Introduction to digital forensics, digital evidence, and increasing awareness of digital evidence. Challenging aspects of digital evidence. Best practices in securing, processing, acquiring, examining and reporting on digital evidence. Cyber trail and challenging aspects of the cyber trail. Brief history of computer crime and cybercrime investigation. Cyber auditing. Evolution of investigative tools. Language of computer crime investigation. The role of computers in  crime, technology and law, jurisdiction, pornography and obscenity, child pornography,  privacy, copyrights and the “theft” of digital intellectual property. The investigative process and investigative reconstruction, with digital evidence. Examine techniques and tools used by computer forensics investigations such as acquisition, preservation, recovery, and analysis of evidence obtained from portable and stationary computer storage devices, personal digital assistants (PDAs), and cell phones. Current technologies and methods as well as leading edge techniques with practical based exercises/projects and research opportunities.

Lab work: Practical exercises on how to make use of various techniques and tools for computer forensics investigations and cyber trail during cybercrime investigations. Practice cyber auditing skills. Work on applying the best practices in securing, processing, acquiring, examining and reporting on digital evidence with current technologies and methods in forensics investigation.