Introduction to Digital Forensics (COMP90096)

Please note: this subject is delivered wholly online and only open to students enrolled in the wholly online Master of Cyber Security (MC-CYBSCMO). Subjects in this course are delivered in an online accelerated learning model and therefore, students typically enrol in one 12.5 credit point subject per online teaching term.

Digital forensics studies the collection, preservation and analysis of digital evidence in order to arrive at evidence-based conclusions about what and how a cyber incident has occurred. When computer crime and intrusions occur, it is necessary to thoroughly investigate what has occurred and it is therefore of fundamental importance to strong cyber security.

This subject introduces students to the principles and practices of digital forensics. Students will learn about the relationship between digital forensics and incident response and what distinguishes one from the other. Students will carry out a synthetic digital forensics investigation and will be required to defend their findings under simulated cross-examination, mimicking the role that digital forensics experts play as expert witnesses in legal jurisprudence.