UC3DRI10 Data Recovery and Advanced Imaging

UC3DRI10 Data Recovery and Advanced Imaging

  • Course description
    • NQF Level
      Bachelor's degree (Level 6 1. Cycle)
    • Area of Study
      Computing
    • Program of Study
      Digital Forensics and Incident Response
    • ECTS
      10
    • Campus
      OnlinePLUS - Bergen, OnlinePLUS - Oslo, Online
    • Course Leader
      Iain Sutherland
Used in other programs
  • Digital Forensics and Incident Response
Introduction

Language of Instruction and assessment: English
May be offered on Campus and Online.
May be offered as a separate course.

Included in the following bachelor's degrees:

  • Digital Forensics and Incident Response
Course Aim(s)

This course aims to explores data storage on various devices at both logical and physical levels, and the methods of data recovery. It provides knowledge on issues and problems that may arise during data recovery, data recovery methodologies, the process of data extraction from a variety of digital sources, and the concepts and usage of large-volume storage technologies. The course enhances skills in advising on data recovery methodologies, and identifying and collecting user data from large volume storage technologies. It also develops the competence to inform others about common storage device failure and the degree of difficulty in recovering material. 

Course Learning Outcomes
Knowledge

The student has knowledge of

K1 relevant issues and problems that might arise during the data recovery process.
K2 data recovery methodologies, and when and how they should be applied.
K3 the process and options for the extraction of data from a variety of digital sources – especially in terms of corrupted, damaged, and remote data.
K4 the concepts and usage of large-volume storage technologies.
Skills

The student gain skills in

S1 the use of concepts and techniques from the course to advise on data recovery methodologies and the likelihood of success.
S2 the ability to identify and collect user data from large volume storage technologies.
General Competence

The student can demonstrate

G1 informing others about the type and nature of common storage device failure and the degree of difficulty in recovering material.
Course Topics
  • Data recovery techniques – physical and logical
  • Data repair techniques
  • Imaging techniques for damaged and remote devices
Teaching Methods
  1. Teaching will be based on a hybrid-flexible approach. Instructor-led face-to-face learning is combined with online learning in a flexible course structure that gives students the option of attending sessions in the classroom, participating online, or doing both.
  2. All activities require active student participation in their own learning.
  3. Learning delivery methods and available resources will be selected to ensure constructive alignment with course content, learning outcomes and assessment criteria.
  4. Students will be taught using a mixture of guidance, self-study, and lecture material. Topics will be introduced in a series of weekly lectures. The guidance sessions will be directed practical exercises and reading in which students can explore topics with support from a teacher. This material will also require students to self-manage their time to ensure tasks are completed and the theory is fully understood. This will allow the students to fully engage with lectures and with their peers.
Resources and Equipment
  1. Learning resources are available in the LMS and include, but is not limited to:
    • literature and online reading material (essential and recommended)
    • streams, recordings and other digital resources, where applicable
    • video conferencing and communication platforms, if applicable
    • tools, software and libraries, where applicable
  2. Students must have access to an internet connection, and suitable hardware.
    • Accessing live streams and virtual laboratories requires a minimum broadband connection of 2Mbps (4Mbps recommended).
  3. Students working on their own laptop/computer are required to acquire appropriate communications software, e.g., webcam, microphone, headphones.
Prerequisite Knowledge

UC2DFF10 Digital Forensics Fundamentals, or equivalent course(s).

Reading List

The reading list for this course and any additional electronic resources will be provided in the LMS.

Study Workload

250 nominal hours.
Study workload applies to both Campus and Online students.

ActivityDuration
Teacher-led activity
31
Teacher-supported work
48
Self-study
171
Work Requirements

There are no mandatory assignments in this course.

Assessment Strategy

This course has two (2) exams contributing towards the overall and final grade of the course.

The course Portfolio contributes 30% and the final Exam contributes 70% of the overall grade.

All exams must be assessed as passed to receive the final Course Grade.

Form of assessmentGrading scaleGroupingDuration of assessment
Portfolio of Work
A-F
Individual
Online Exam
A-F
Individual