32309 Digital Forensics6cp; Forms of attendance and mode of delivery in this subject have changed to enable social distancing and reduce the risks of spreading COVID-19 in our community.
Requisite(s): 32548 Cybersecurity
These requisites may not apply to students in certain courses.
There are course requisites for this subject. See access conditions.
Anti-requisite(s): 48436 Digital Forensics
Confident with using Windows command line utilities such as netstat, nslookup, net and ipconfig. Also confident with Linux command line tools such as grep, ls, uname and ps.
This is a practice-based subject, using material based on the textbooks. Learning is laboratory-based.
Students assess if a crime has been committed, acquire digital evidence, analyse the evidence and prepare forensic reports.
The emphasis is on digital forensics applications, in particular:
- forensic analysis of a digital storage device where evidence of visits to web sites is recovered to support or oppose a hypothesis before a criminal court
- eDiscovery (a form of discovery related to civil litigation) where students acquire evidence of contact with a third party using email or social media
- intrusion investigation into the nature and extent of an unauthorised network intrusion. Students look for evidence of malware being installed on the device that may use the network to exfiltrate data to an unauthorised person.
Spring session, City campus
Detailed subject description.
Information to assist with determining the applicable fee type can be found at Understanding fees.
- Commonwealth-supported students: view subject fees at Fees Search: Commonwealth-supported
- Postgraduate domestic fee-paying students: fees are charged according to the course enrolled in; refer to Domestic Fees Search: Postgraduate and Research
- International students: fees are charged according to the course enrolled in; refer to International Fees Search
- Subject EFTSL: 0.125