A report to investigate a simulated crime.

Forensic Investigation

Exam

The module will cover the three phases of a computing forensics investigation:
Search Phase:
Search preparation, processing the crime or incident scene, securing evidence from the computer, data acquisition and identification of digital evidence sources. Need to ensure that the ACPO guidelines on Computer Forensics investigations are followed correctly.
Analysis Phase:
Preparing for a computer investigation, the structure and tools required in an investigator&#39;s environment, computer forensics software needs, current computer forensics software and hardware, the impact of file and operating systems on the investigation, computer forensics analysis, recovery and investigation of digital image (picture) files and investigating e-mail.
Presentation Phase:
Presenting and reporting the results of a Computer Forensics investigation.

Digital Forensics - 5105COMP

Digital Forensics

Interpret the theoretical underpinnings of computer forensics.

Apply practical knowledge of a number of computer forensic tools as used by practitioners in the field.

Compare a range of appropriate methodologies used during an investigation and present the results of the investigation.

Explain the structure of files and the metadata contained within them.