Computer forensics and Investigations

In this unit, students explore various options available to organisations to investigate problems and attacks on their computer systems. It enables students to develop knowledge of laws governing the IT domain and apply approaches to investigating cyber-crime using digital forensic techniques. A range of computer forensic frameworks will be discussed to systematically assist organisations in identifying, analysing, and reporting cyber security issues. In addition, students will study exploitation techniques and use system log files, domain authentication and registry mechanisms to acquire digital evidence. The key focus of the unit is on the identification, preservation, analysis and presentation of digital evidence related to misuse or intrusion into an enterprise-level system.