UC2DFF10 Digital Forensics Fundamentals

UC2DFF10 Digital Forensics Fundamentals

  • Course description
    • NQF Level
      Bachelor's degree (Level 6 1. Cycle)
    • Area of Study
      Computing
    • Program of Study
      Digital Forensics and Incident Response
    • ECTS
      10
    • Campus
      Kristiansand, OnlinePLUS - Bergen, OnlinePLUS - Oslo, Online
    • Course Leader
      Emlyn Butterfield
Introduction

Language of Instruction and assessment: English
May be offered on Campus and Online.
May be offered as a separate course.

Included in the following bachelor's degrees:

  • Digital Forensics and Incident Response
Course Aim(s)

This course aims to provide an understanding of how to respond to a digital crime, focusing on initial on-scene actions. It explores both theoretical aspects and international practices related to the preparation, selection, validation, and operation of investigative tools and evidence acquisition. The knowledge gained includes understanding the investigation process, the tools used, crime scene documentation, and procedures to secure a digital crime scene. Skills developed include securing and storing digital evidence, validating tools and methodologies, and maintaining proper documentation to ensure the chain of custody of digital evidence. The course also emphasizes the importance of impartiality and following appropriate guidelines during an investigation. 

Course Learning Outcomes
Knowledge

The student has knowledge of

K1 the investigation process from seizure to prosecution.
K2 the tools that can be used as part of an investigation.
K3 contemporaneous notes and crime scene documentation.
K4 guidelines and procedures to store, process and secure a digital crime scene.
Skills

The student gain skills in

S1 the process to secure and store digital evidence.
S2 the process to validate tools and scientific methodologies.
S3 an ability to maintain appropriate documentation requirements to ensure the chain of custody of digital evidence.
General Competence

The student can demonstrate

G1 impartiality and an ability to follow appropriate guidelines as part of an investigation.
G2 crime scene importance as part of a digital examination.
Course Topics
  • Crime scene handling
  • Sources of evidence
  • Evidence imaging
  • Maintaining chain of evidence
  • Documentation
  • Tool validation
  • File systems overview
Teaching Methods
  1. Teaching will be based on a hybrid-flexible approach. Instructor-led face-to-face learning is combined with online learning in a flexible course structure that gives students the option of attending sessions in the classroom, participating online, or doing both.
  2. All activities require active student participation in their own learning.
  3. Learning delivery methods and available resources will be selected to ensure constructive alignment with course content, learning outcomes and assessment criteria.
  4. Students will be taught using a mixture of guidance, self-study, and lecture material. Topics will be introduced in a series of weekly lectures. The guidance sessions will be directed practical exercises and reading in which students can explore topics with support from a teacher. This material will also require students to self-manage their time to ensure tasks are completed and the theory is fully understood. This will allow the students to fully engage with lectures and with their peers.
Resources and Equipment
  1. Learning resources are available in the LMS and include, but is not limited to:
    • literature and online reading material (essential and recommended)
    • streams, recordings and other digital resources, where applicable
    • video conferencing and communication platforms, if applicable
    • tools, software and libraries, where applicable
  2. Students must have access to an internet connection, and suitable hardware.
    • Accessing live streams and virtual laboratories requires a minimum broadband connection of 2Mbps (4Mbps recommended).
  3. Students working on their own laptop/computer are required to acquire appropriate communications software, e.g., webcam, microphone, headphones.
Prerequisite Knowledge

UC1OSA10 Operating Systems and Computer Architecture, or equivalent course(s).

Reading List

The reading list for this course and any additional electronic resources will be provided in the LMS.

Study Workload

250 nominal hours.
Study workload applies to both Campus and Online students.

ActivityDuration
Teacher-led activity
39
Teacher-supported work
48
Self-study
163