Course detail

Digital Forensics (in English)

FIT-DFAaAcad. year: 2020/2021

The course focuses on the role of computer forensics and the methods used in the investigation of computer crimes. The course explains the need for proper investigation and illustrates the process of locating, handling, and processing computer evidence. A detailed explanation of how to efficiently manage a forensics investigation and how to preserve and present evidence is covered.

Guarantor

doc. Ing. Ondřej Ryšavý, Ph.D.

Department

Department of Information Systems (UIFS)

Offered to foreign students

Of all faculties

Learning outcomes of the course unit

Student acquaints basic concepts and principles of computer forensics and skills in a computer forensic examination.

Prerequisites

Basic knowledge of operating systems, storage media, networking and ability to write simple scripts.

Co-requisites

Not applicable.

Recommended optional programme components

Not applicable.

Literature

Nipun Jaswal: Hands-On Network Forensics: Investigate network attacks and find evidence using common network forensic tools,  Packt Publishing, 2019. (EN)

Planned learning activities and teaching methods

Not applicable.

Assesment methods and criteria linked to learning outcomes

  • Earning at least 20 points during the term is required.
  • Minimum of 20 points of the final exam is necessary to pass the course.

Language of instruction

English

Work placements

Not applicable.

Aims

The aim is to understand principles of computer forensics and the basic concepts used in a computer forensics examination; introduces techniques required for conducting a forensic analysis of systems and data.

Specification of controlled education, way of implementation and compensation for absences

Controlled activities include a project, computer exercises and the final exam. Missed labs will not be replaced.

Classification of course in study plans

  • Programme IT-MGR-2 Master's

    branch MBI , any year of study, summer semester, 5 credits, elective
    branch MPV , any year of study, summer semester, 5 credits, elective
    branch MGM , any year of study, summer semester, 5 credits, elective

  • Programme IT-MGR-2 Master's

    branch MGMe , any year of study, summer semester, 5 credits, compulsory-optional

  • Programme IT-MGR-2 Master's

    branch MSK , any year of study, summer semester, 5 credits, elective
    branch MIS , any year of study, summer semester, 5 credits, elective
    branch MBS , any year of study, summer semester, 5 credits, elective
    branch MIN , any year of study, summer semester, 5 credits, elective
    branch MMI , any year of study, summer semester, 5 credits, elective
    branch MMM , any year of study, summer semester, 5 credits, elective

  • Programme MITAI Master's

    specialization NADE , any year of study, summer semester, 5 credits, elective
    specialization NBIO , any year of study, summer semester, 5 credits, elective
    specialization NGRI , any year of study, summer semester, 5 credits, elective
    specialization NNET , any year of study, summer semester, 5 credits, elective
    specialization NVIZ , any year of study, summer semester, 5 credits, elective
    specialization NCPS , any year of study, summer semester, 5 credits, elective
    specialization NSEC , any year of study, summer semester, 5 credits, elective
    specialization NEMB , any year of study, summer semester, 5 credits, elective
    specialization NHPC , any year of study, summer semester, 5 credits, elective
    specialization NISD , any year of study, summer semester, 5 credits, elective
    specialization NIDE , any year of study, summer semester, 5 credits, elective
    specialization NISY , any year of study, summer semester, 5 credits, elective
    specialization NMAL , any year of study, summer semester, 5 credits, elective
    specialization NMAT , any year of study, summer semester, 5 credits, elective
    specialization NSEN , any year of study, summer semester, 5 credits, elective
    specialization NVER , any year of study, summer semester, 5 credits, elective
    specialization NSPE , any year of study, summer semester, 5 credits, elective

  • Programme IT-MGR-1H Master's

    branch MGH , any year of study, summer semester, 5 credits, recommended

Type of course unit

 

Lecture

26 hours, optionally

Teacher / Lecturer

Ing. Radek Hranický, Ph.D.
doc. Ing. Petr Matoušek, Ph.D., M.A.
doc. Ing. Ondřej Ryšavý, Ph.D.

Syllabus

  1. Introduction to Forensics Investigation
  2. Data Acquisition Tools and Methods
  3. Computer Forensics Tools
  4. Data Recovery, Filesystem Examination
  5. Data Analysis, Carving, Recovery Files
  6. OS Forensics: Windows, Mac OS, Linux
  7. Introduction to Mobile Forensics
  8. Mobile Forensics Data Acquisition and Analysis
  9. Network Traffic Capturing and Processing
  10. Network Data Analysis
  11. Network Device Forensics
  12. IoT Forensics
  13. Cryptocurrencies

Laboratory exercise

13 hours, compulsory

Teacher / Lecturer

Ing. Radek Hranický, Ph.D.
doc. Ing. Petr Matoušek, Ph.D., M.A.
doc. Ing. Ondřej Ryšavý, Ph.D.

Syllabus

  1. Disk Imaging and Data Acquisition
  2. Digital Forensics using Autopsy
  3. Mobile data acquisition and analysis using MobilEdit
  4. Network Forensics using Wireshark
  5. Network Forensics: Flow and Log Analysis
  6. Digital Forensics of Cryptocurrencies

Project

13 hours, compulsory

Teacher / Lecturer

Ing. Radek Hranický, Ph.D.
doc. Ing. Petr Matoušek, Ph.D., M.A.
doc. Ing. Ondřej Ryšavý, Ph.D.

Syllabus

Performing the investigation of the selected cases. Solving the cases and writing the report.