HI6043 Computer Forensics and Analysis
This unit introduces students to different forensic tools, techniques and methods required to recover digital evidence from a variety of operating environments. Students will investigate the procedures related to computer forensics and digital investigations including formal case management and evidential best practices and understand the key principles associated with digital forensic processes, data hiding, evidence collection and validation required to perform forensic analysis. Students will learn how to conduct technical forensic processes that comply with legal requirements and documentation for forensic evidence, and the use of practical forensic tools. They will also cover the rules of evidence, chain of custody, standard operating procedures, and the manipulation of technology to conceal illegal activities, and revealing concealed information using cyber forensics.