Digital Forensics and Investigation Methods

At the end of this course, students should be able to: 1. develop basic knowledge on digital forensic and digital evidence; 2. establish awareness of digital evidence challenges aspects of digital evidence; 3. appraise the cyber trail and its challenges; 4. review the evolution of investigative tools and the language of computer crime investigation; 5. identify the role of computers in crime, technology and law; 6. examine techniques and tools used by computer forensics investigations; and 7. apply best practices in securing, processing, acquiring, examining, and reporting on digital evidence with current technologies and methods in forensics investigation.

Introduction to digital forensics, digital evidence, and increasing awareness of digital evidence. Challenging aspects of digital evidence. Best practices in securing, processing, acquiring, examining and reporting on digital evidence. Cyber trail and challenging aspects of the cyber trail. Brief history of computer crime and cybercrime investigation. Cyber auditing. Evolution of investigative tools. Language of computer crime investigation. The role of computers in crime, technology and law, jurisdiction, pornography and obscenity, child pornography, privacy, copyrights and the “theft” of digital intellectual property. The investigative process and investigative reconstruction, with digital evidence. Examine techniques and tools used by computer forensics investigations such as acquisition, preservation, recovery, and analysis of evidence obtained from portable and stationary computer storage devices, personal digital assistants (PDAs), and cell phones. Current technologies and methods as well as leading edge techniques with practical based exercises/projects and research opportunities. Lab work: Practical exercises on how to make use of various techniques and tools for computer forensics investigations and cyber trail during cybercrime investigations. Practice cyber auditing skills. Work on applying the best practices in securing, processing, acquiring, examining and reporting on digital evidence with current technologies and methods in forensics investigation.