Course detail
Digital Forensics (in English)
FIT-DFAaAcad. year: 2023/2024
The course focuses on the role of computer forensics and the methods used in the investigation of computer crimes. The course explains the need for proper investigation and illustrates the process of locating, handling, and processing computer evidence. A detailed explanation of how to efficiently manage a forensics investigation and how to preserve and present evidence is covered.
Language of instruction
Number of ECTS credits
Mode of study
Guarantor
Department
Offered to foreign students
Entry knowledge
Basic knowledge of operating systems, storage media, networks, and the ability to create simple programs.
Rules for evaluation and completion of the course
- Project (15 points).
- Hands-on labs (30 points). Missed labs can only be replaced if there is a serious obstacle in the study.
- Final exam (55 points). Minimum of 20 points of the final exam is necessary to pass the course.
Controlled activities include the project (15 points), hands-on labs (30 points), and the final exam (55 points). Missed labs can only be replaced if there is a serious obstacle in the study.
Aims
The aim is to understand principles of computer forensics and the basic concepts used in a computer forensics examination; introduces techniques required for conducting a forensic analysis of systems and data.
Student acquaints basic concepts and principles of computer forensics and skills in a computer forensic examination.
Study aids
Prerequisites and corequisites
Basic literature
Gerard Johansen: Digital Forensics and Incident Response: Incident response techniques and procedures to respond to modern cyber threats, Packt Publishing; 2nd edition, 2020 (EN)
Recommended reading
Nipun Jaswal: Hands-On Network Forensics: Investigate network attacks and find evidence using common network forensic tools, Packt Publishing, 2019. (EN)
Elearning
Classification of course in study plans
- Programme IT-MSC-2 Master's
branch MGMe , 0 year of study, summer semester, compulsory-optional
- Programme IT-MSC-2 Master's
branch MBS , 0 year of study, summer semester, elective
branch MPV , 0 year of study, summer semester, elective
branch MIS , 0 year of study, summer semester, elective
branch MIN , 0 year of study, summer semester, elective
branch MGM , 0 year of study, summer semester, elective
branch MBI , 0 year of study, summer semester, elective
branch MSK , 0 year of study, summer semester, elective
branch MMM , 0 year of study, summer semester, elective - Programme MIT-EN Master's 0 year of study, summer semester, compulsory-optional
- Programme MITAI Master's
specialization NISY , 0 year of study, summer semester, elective
specialization NSPE , 0 year of study, summer semester, elective
specialization NBIO , 0 year of study, summer semester, elective
specialization NSEN , 0 year of study, summer semester, elective
specialization NVIZ , 0 year of study, summer semester, elective
specialization NGRI , 0 year of study, summer semester, elective
specialization NADE , 0 year of study, summer semester, elective
specialization NISD , 0 year of study, summer semester, elective
specialization NMAT , 0 year of study, summer semester, elective
specialization NSEC , 0 year of study, summer semester, elective
specialization NISY up to 2020/21 , 0 year of study, summer semester, elective
specialization NCPS , 0 year of study, summer semester, elective
specialization NHPC , 0 year of study, summer semester, elective
specialization NNET , 0 year of study, summer semester, elective
specialization NMAL , 0 year of study, summer semester, elective
specialization NVER , 0 year of study, summer semester, elective
specialization NIDE , 0 year of study, summer semester, elective
specialization NEMB , 0 year of study, summer semester, elective
specialization NEMB up to 2021/22 , 0 year of study, summer semester, elective - Programme IT-MGR-1H Master's
specialization MGH , 0 year of study, summer semester, recommended course
Type of course unit
Lecture
Teacher / Lecturer
Syllabus
- Investigation Techniques
- Data Acquisition
- Data Recovery and Analysis
- Windows System Forensics
- Microsoft 365 Forensics
- Web Browser Forensics
- Events and Logs
- Network Forensics
- Encryption Traffic Analysis
- Memory Forensics
- Malware Analysis
- Password Recovery
- Case Study
Laboratory exercise
Teacher / Lecturer
Syllabus
Hands-on activities in the following areas:
- Investigation Techniques Basics
- Data Acquisition
- Data Recovery and Analysis
- Windows System Forensics
- Microsoft 365 Forensics
- Web Browser Forensics
- Events and Logs
- Network Forensics
- Encryption Traffic Analysis
- Memory Forensics
- Malware Analysis
- Password Recovery
- Case Study
Project
Teacher / Lecturer
Syllabus
Performing the investigation of the selected cases. Solving the cases and writing the report.
Elearning