IY3D609 - Digital Forensic Techniques   01 Jul 2022 - 31 Aug 2028 | Version 1

Associated Module Information

Module Code: IY3D609
Module Title: Digital Forensic Techniques  
Faculty: Faculty of Computing, Engineering and Science
Faculty Group: Cyber Security
Faculty Sub Group: Cyber Security
Module Leader: Beth Jenkins
Module Team: Emma Derbi, Sharan Johnstone, Joshua Richards, Andrew Bellamy, Peter Eden, Mamoun Qasem, Richard Ward, Rachael Medhurst, Arun Kumar, Madhu Khurana, Nisha Rawindaran, Amar Seeam
First Intended Intake: SEP 2022 Final Year of Intake:
Date Closed:
Credit Value: 40 Credit Level: 6
Language: English
Percentage of Module Taught in Welsh: 0
Equivalent Module:
HECOS codes: 100385 - computer forensics
HECOS Code Weighting: 100

Document Version Information

Version 1
Valid From 01 Jul 2022
Valid To 31 Aug 2028

Module Aims

Develop advanced practical and theoretical principles regarding Digital Forensics on a variety of devices and sources?and be able to evaluate, analyse and apply investigative solutions on a range of sources and devices.

Content Summary

Introduction into the module and Recap on crime scene/forensic software/Drive Geometry.

OS Artefacts – Windows Registry, link files/prefetch/shellbags/jumplists?etc.

MAC & Windows Forensics

Encryption/password cracking, RAM forensics, Cloud Forensics.

Anti-Forensics & OSINT

Introduction Mobile Phone Forensics/Expert Witness Statements/Court Rooms

Learning and Teaching Methods

Activity Type Hours
Lecture 16
Tutorial 16
Practical classes and workshops 40
Independent Study 140
Directed Study 110
Formative Assessment - Scheduled 4
Active/Simulation Based 16
Groupwork 12
Interdisciplinary work 6
Problem / challenge based learning 40
Total Hours Selected 400

Learning Outcomes

# Learning Outcome
LO1 Demonstrate advanced knowledge and skills in digital forensic concepts concentrating on the analysis, interpretation, and extraction of digital evidence.
LO2 Conduct a sophisticated analytic investigation on different data sources using appropriate tools and techniques.

Module Requisites

N/A

Assessment Criteria

Assessment Category Assessment Type Description Duration Word Count Weight (%) Best of? Pass Mark
Asynchronous Assessment Student Choice 1 Mac Forensics , Students are offered the choice of either a 1500 word written report or a 10 minute VLOG submission based on the specified topic. The criteria are the same whichever type of assessment the student chooses. One mark is awarded. 10 1500 30 No 40
Asynchronous Assessment Practical Coursework 1 (Asynch) Exercises undertaken in laboratory aimed at assessing the application of knowledge, analytical, problem solving or evaluate skills of a digital forensic investigation. 0 3000 70 No 40

Assessment Matrix

Assessment Type Learning Outcomes
LO1 LO2
Student Choice 1
Practical Coursework 1 (Asynch)

Reading List

Essential Reading:

Cohen, F. (2012), Digital Forensic Evidence Examination, Fred Cohen & Associates.

Gogolin, G. (2021), Digital Forensics Explained, (2nd Edition), Boca Raton, CRC Press.

Hayes, D. (2021), A Practical Guide to Digital Forensic Investigations, (2nd Edition), Upper Saddle River, Pearson Education.

Recommended Reading:

Carvey, A, H. (2016), Windows Registry Forensics: Advanced Digital Forensic analysis of the Windows Registry, (2nd Edition), Cambridge, Elsevier.

Chen, L. and Takabi, H. (2019), Security, privacy, and digital forensics in the cloud, Singapore, John Wiley & Sons Inc.

Online Version:

https://rl.talis.com/3/southwales/lists/E55E6EA3-F141-923E-1D51-5E401A644D82.html?lang=en&login=1