The unit was introduced during the development of the Master of Cybersecurity in order to address the in-demand and rapidly evolving domain of IT (digital) forensics.

16/12/2020: Admin - adding Reasons for Change on behalf of the CE. CE added FIT5163 as the co-requisite of FIT5223. Currently FIT5163 is listed as the prerequisite of FIT5223. This is so students will have enough knowledge to sit FIT5223 only by having FIT9137 passed and hence FIT5163 is not required explicitly. This change will give MCySec students more flexible options in their enrolments.

14/07/2021: Matt - adding reasons for change on behalf of the CE. change the in-semester assignments from 60% to 50% and remove the weekly quizzes. Assignment 1 would be divided into two different assignments with 10% for the first one. It is intended to provide some level of time pressure and get students to work on the assignments earlier and assist them with completing the following assignments.

Upon successful completion of this unit students should be able to:

1. explain the motivations and landscape of forensic investigations in an IT context;
2. explain the relevant legal definitions and frameworks that apply to digital forensic investigations;
3. select appropriate tools and algorithms to perform forensic investigations and acquire relevant evidence;
4. apply and evaluate forensic techniques in local media-based and network-based environments;
5. report on forensic findings in a clear and concise manner;
6. demonstrate how digital forensics can be employed by Police and Tax officials in a court of law.

029901

This unit provides a broad coverage of (digital) IT forensics. Students will examine definitions of evidence as they apply to investigations involving the seizure and examination of information technology devices. The unit will introduce students to various tools, techniques and algorithms that may be employed by investigators for acquisition, preservation, and analysis of evidence. Disk-based (local) and network (remote) forensic environments will be explored. Students will also learn of the impediments and complicating factors that can threaten forensic investigations.

On-campus

Examination (2 hours and 10 minutes): 50%; In-semester assessment: 50%

Assessment breakdown:

Assignment 1: 10% - ULO 1,2 Assignment 2: 20% - ULO 3,4 Assignment 3: 20% - ULO 2,3,5 Scheduled Final Assessment: 50% - ULO 1,2,3,4,5,6

Minimum total expected workload equals 12 hours per week comprising:

• Two hours/week lectures
• Two hours/week laboratories

A minimum of 8 hours per week of personal study for completing lab/tutorial activities, assignments, private study and revision

FIT

FIT5163