UC2DFI10 Digital Forensic Investigation
UC2DFI10 Digital Forensic Investigation
- Course description
- NQF LevelBachelor's degree (Level 6 1. Cycle)
- Area of StudyComputing
- Program of StudyDigital Forensics and Incident Response
- ECTS10
- CampusKristiansand, OnlinePLUS - Bergen, OnlinePLUS - Oslo, Online
- Course LeaderEmlyn Butterfield
Language of Instruction and assessment: English
May be offered on Campus and Online.
May be offered as a separate course.
Included in the following bachelor's degrees:
- Digital Forensics and Incident Response
This course aims to provide students with an understanding of modern operating systems and potential evidence sources within these systems. Following best practices in evidence examination and analysis, students are expected to produce a final report on the evidence gathered. The course offers knowledge in evidential analysis of digital systems, interpretation and evidential value of forensic artifacts, and various tools and techniques for forensic analysis. Students will gain skills in processing, storing, interpreting and preparing evidence. They will also demonstrate impartiality, the ability to follow appropriate scientific processes and instructions for a forensic examination, and the competency to communicate information and findings to a range of audiences.
The student has knowledge of
| K1 | evidential analysis of digital systems. |
|---|---|
| K2 | the interpretation and evidential value of forensic artefacts. |
| K3 | the tools / techniques for forensic analysis. |
The student can demonstrate
| G1 | impartiality and an ability to follow appropriate scientific processes and instructions to conduct a forensic examination. |
|---|---|
| G2 | communicating information and findings to a range of audiences. |
- Forensic tools and their application to the forensic investigation.
- Techniques and methods to identify, analyse and interpret digital evidence.
- Analysis of application and operating system artefacts.
- Interpretation and conveyance of technical information to the layman.
- Teaching will be based on a hybrid-flexible approach. Instructor-led face-to-face learning is combined with online learning in a flexible course structure that gives students the option of attending sessions in the classroom, participating online, or doing both.
- All activities require active student participation in their own learning.
- Learning delivery methods and available resources will be selected to ensure constructive alignment with course content, learning outcomes and assessment criteria.
- Students will be taught using a mixture of guidance, self-study, and lecture material. Topics will be introduced in a series of weekly lectures. The guidance sessions will be directed practical exercises and reading in which students can explore topics with support from a teacher. This material will also require students to self-manage their time to ensure tasks are completed and the theory is fully understood. This will allow the students to fully engage with lectures and with their peers.
- Learning resources are available in the LMS and include, but is not limited to:
- literature and online reading material (essential and recommended)
- streams, recordings and other digital resources, where applicable
- video conferencing and communication platforms, if applicable
- tools, software and libraries, where applicable
- Students must have access to an internet connection, and suitable hardware.
- Accessing live streams and virtual laboratories requires a minimum broadband connection of 2Mbps (4Mbps recommended).
- Students working on their own laptop/computer are required to acquire appropriate communications software, e.g., webcam, microphone, headphones.
UC1OSA10 Operating Systems and Computer Architecture, or equivalent
The reading list for this course and any additional electronic resources will be provided in the LMS.
| Activity | Duration |
|---|---|
Teacher-led activity | 40 |
Teacher-supported work | 48 |
Self-study | 164 |