MIT9313 Digital Forensics
Unit Code
MIT9313
Level
Postgraduate
Campus
Sydney
Prerequisites
MIT8202
Credit Points
10
Subject Description
MIT9313 Digital Forensics introduces students to the principles, procedures, and techniques used by professionals to uncover and analyse critical evidence. Students will be equipped with the knowledge necessary theoretical and practical skills to proficiently uncover, analyse, and interpret digital evidence. The students will get a firm foundation in this field as well as employ state-of-the-art tools and techniques to extract evidence of cybercrime and fraud. Students will learn from data acquisition to techniques to process and analyse evidence, including a validation process.
Course Level
Level 2
Subject Type
☒ Core
Study Mode: Face to face on site
Study Load: Full-time
Learning Topics
- Digital forensics principles, investigations and laboratory practice
- Digital evidence acquisition, preservation and incident-scene processing
- Windows, Linux and macOS file-system forensics
- Forensic tools, evidence recovery, analysis and validation
- Network, virtual machine, email, social media, mobile and cloud forensics
Subject Learning Outcomes
- Demonstrate and apply understanding of the fundamental concepts, frameworks and principles of digital forensics.
- Design and implement a digital forensics lab based on the requirements of the organisation.
- Exhibit proficiency in the use of the main digital forensics’ tools and techniques for data acquisition, analysis and validation.
- Analyse file system, memory, operating system and network artefacts using contemporary open-source tools, techniques and procedures.
- Evaluate policies, laws, and legislation for digital forensics investigations with a critical and ethical perspective.
Assessment
AIIHE uses a variety of assessment tools to guide and assess each student’s achievement of the subject learning outcomes. In this subject, students undertake practical skills assessments 10 in-class practical activities for analysing and extracting evidence of crime, this assessment provides students with the opportunity to analyse a case using multiple tools and discussing legal and ethical implications, and group report and presentation students will work in groups to solve the given case studies and present their work using tools delivered in the subject.
Summary of Assessment
- Students must attempt all assessment tasks, and achieve an overall mark of at least 50%, to pass this subject.
- Assessment in this subject is consistent with and informed by the AIIHE Assessment Policy and Procedure.
| Assessment Type | Due Date | Weighting |
|---|---|---|
| Assessment 1: Practical Skills Assessments | Week 2, 3, 4, 5, 6, 8, 9, 10, 11, 12 | 30% (3% each) |
| Assessment 2: Individual Report | Week 8 | 30% |
| Assessment 3: Group Report and Presentation | Week 11, 13 | 40% (Group Report: 20% Group Presentation: 10% Individual Q&A: 10%) |
Learning Resources
AIIHE will update the topic coverage of the subject and the available relevant learning resources at the time of subject delivery. In the interim, AIIHE provides the following indicative list of relevant reference material. AIIHE also subscribes to eLearning Resources through the Canvas portal, and where relevant material is available, AIIHE will seek to source reference material from this system for staff and student access.
Prescribed Reading
- Nelson, B., Phillips, A., Steuart, C. (2019). Guide to Computer Forensics and Investigations. 6th edn. Cengage Learning.
Texts and References
- Hayes, D.R. (2020). A Practical Guide to Digital Forensics Investigations.2nd edition, Pearson Education.