School: Science

This unit information may be updated and amended immediately prior to semester. To ensure you have the correct outline, please check it again at the beginning of semester.

  • Unit Title

    Digital Forensics
  • Unit Code

    CSI6205
  • Year

    2021
  • Enrolment Period

    1
  • Version

    3
  • Credit Points

    20
  • Full Year Unit

    N
  • Mode of Delivery

    On Campus
    Online
  • Unit Coordinator

    Dr Patryk Sebastian SZEWCZYK

Description

This unit introduces students to digital forensic tools, techniques and methods used to recover and examine digital evidence from electronic devices. Modern forensic computing involves the preservation, identification and analysis of digital based evidence acquired from volatile or persistent storage locations. Digital evidence is often not examinable by conventional computing access methods, so specialised software tools, techniques and processes must be employed to preserve and recover this evidence in a forensically valid manner.

Prerequisite Rule

Students must have passed CSI6199, CSI6201 and CSI6202

Learning Outcomes

On completion of this unit students should be able to:

  1. Evaluate digital forensic case studies, tools, methods, file systems and digital artefacts.
  2. Apply appropriate tools and techniques to complete a digital forensic investigation.
  3. Produce documentation to support the presentation of evidence in a court of law.

Unit Content

  1. Contemporary digital forensic issues and trends.
  2. Forensic validation of results.
  3. Forensic computing evidence recovery tools and techniques.
  4. Physical, environmental and organisational considerations for deploying forensic computing initiatives.
  5. Ethical and legal issues of forensic computing application.
  6. The forensic process and method.
  7. Design and management of a digital forensics laboratory.
  8. Mobile and network forensics.
  9. Challenges inhibiting a successful digital forensic investigation.

Learning Experience

ON-CAMPUS

Students will attend on campus classes as well as engage in learning activities through ECUs LMS

JoondalupMount LawleySouth West (Bunbury)
Semester 213 x 2 hour workshopNot OfferedNot Offered

For more information see the Semester Timetable

ONLINE

Students will engage in learning experiences through ECUs LMS as well as additional ECU l

Assessment

GS1 GRADING SCHEMA 1 Used for standard coursework units

Students please note: The marks and grades received by students on assessments may be subject to further moderation. All marks and grades are to be considered provisional until endorsed by the relevant School Progression Panel.

ON CAMPUS
TypeDescriptionValue
PresentationRecorded workshop20%
TestReview tests30%
Case StudyForensic investigation case study50%
ONLINE
TypeDescriptionValue
PresentationRecorded workshop20%
TestReview tests30%
Case StudyForensic investigation case study50%

Disability Standards for Education (Commonwealth 2005)

For the purposes of considering a request for Reasonable Adjustments under the Disability Standards for Education (Commonwealth 2005), inherent requirements for this subject are articulated in the Unit Description, Learning Outcomes and Assessment Requirements of this entry. The University is dedicated to provide support to those with special requirements. Further details on the support for students with disabilities or medical conditions can be found at the Access and Inclusion website.

Academic Misconduct

Edith Cowan University has firm rules governing academic misconduct and there are substantial penalties that can be applied to students who are found in breach of these rules. Academic misconduct includes, but is not limited to:

  • plagiarism;
  • unauthorised collaboration;
  • cheating in examinations;
  • theft of other students' work;

Additionally, any material submitted for assessment purposes must be work that has not been submitted previously, by any person, for any other unit at ECU or elsewhere.

The ECU rules and policies governing all academic activities, including misconduct, can be accessed through the ECU website.

CSI6205|3|1

School: Science

This unit information may be updated and amended immediately prior to semester. To ensure you have the correct outline, please check it again at the beginning of semester.

  • Unit Title

    Digital Forensics
  • Unit Code

    CSI6205
  • Year

    2021
  • Enrolment Period

    2
  • Version

    3
  • Credit Points

    20
  • Full Year Unit

    N
  • Mode of Delivery

    On Campus
    Online
  • Unit Coordinator

    Dr Patryk Sebastian SZEWCZYK

Description

This unit introduces students to digital forensic tools, techniques and methods used to recover and examine digital evidence from electronic devices. Modern forensic computing involves the preservation, identification and analysis of digital based evidence acquired from volatile or persistent storage locations. Digital evidence is often not examinable by conventional computing access methods, so specialised software tools, techniques and processes must be employed to preserve and recover this evidence in a forensically valid manner.

Prerequisite Rule

Students must have passed CSI6199, CSI6201 and CSI6202

Learning Outcomes

On completion of this unit students should be able to:

  1. Evaluate digital forensic case studies, tools, methods, file systems and digital artefacts.
  2. Apply appropriate tools and techniques to complete a digital forensic investigation.
  3. Produce documentation to support the presentation of evidence in a court of law.

Unit Content

  1. Contemporary digital forensic issues and trends.
  2. Forensic validation of results.
  3. Forensic computing evidence recovery tools and techniques.
  4. Physical, environmental and organisational considerations for deploying forensic computing initiatives.
  5. Ethical and legal issues of forensic computing application.
  6. The forensic process and method.
  7. Design and management of a digital forensics laboratory.
  8. Mobile and network forensics.
  9. Challenges inhibiting a successful digital forensic investigation.

Learning Experience

ON-CAMPUS

Students will attend on campus classes as well as engage in learning activities through ECUs LMS

JoondalupMount LawleySouth West (Bunbury)
Semester 213 x 2 hour workshopNot OfferedNot Offered

For more information see the Semester Timetable

ONLINE

Students will engage in learning experiences through ECUs LMS as well as additional ECU l

Assessment

GS1 GRADING SCHEMA 1 Used for standard coursework units

Students please note: The marks and grades received by students on assessments may be subject to further moderation. All marks and grades are to be considered provisional until endorsed by the relevant School Progression Panel.

ON CAMPUS
TypeDescriptionValue
PresentationRecorded workshop20%
TestReview tests30%
Case StudyForensic investigation case study50%
ONLINE
TypeDescriptionValue
PresentationRecorded workshop20%
TestReview tests30%
Case StudyForensic investigation case study50%

Core Reading(s)

  • Nelson, B., Phillips, A., & Steuart, C. (2019). Guide to Computer Forensics and Investigations. Cengage. Retrieved from https://ecu.on.worldcat.org/oclc/1096229999

Disability Standards for Education (Commonwealth 2005)

For the purposes of considering a request for Reasonable Adjustments under the Disability Standards for Education (Commonwealth 2005), inherent requirements for this subject are articulated in the Unit Description, Learning Outcomes and Assessment Requirements of this entry. The University is dedicated to provide support to those with special requirements. Further details on the support for students with disabilities or medical conditions can be found at the Access and Inclusion website.

Academic Misconduct

Edith Cowan University has firm rules governing academic misconduct and there are substantial penalties that can be applied to students who are found in breach of these rules. Academic misconduct includes, but is not limited to:

  • plagiarism;
  • unauthorised collaboration;
  • cheating in examinations;
  • theft of other students' work;

Additionally, any material submitted for assessment purposes must be work that has not been submitted previously, by any person, for any other unit at ECU or elsewhere.

The ECU rules and policies governing all academic activities, including misconduct, can be accessed through the ECU website.

CSI6205|3|2