Course detail

Digital Forensics (in English)

FIT-DFAaAcad. year: 2020/2021

The course focuses on the role of computer forensics and the methods used in the investigation of computer crimes. The course explains the need for proper investigation and illustrates the process of locating, handling, and processing computer evidence. A detailed explanation of how to efficiently manage a forensics investigation and how to preserve and present evidence is covered.

Language of instruction

English

Number of ECTS credits

Mode of study

Not applicable.

Guarantor

doc. Ing. Ondřej Ryšavý, Ph.D.

Department

Department of Information Systems (UIFS)

Offered to foreign students

Of all faculties

Learning outcomes of the course unit

Student acquaints basic concepts and principles of computer forensics and skills in a computer forensic examination.

Prerequisites

Basic knowledge of operating systems, storage media, networking and ability to write simple scripts.

Co-requisites

Not applicable.

Planned learning activities and teaching methods

Not applicable.

Assesment methods and criteria linked to learning outcomes

Earning at least 20 points during the term is required.
Minimum of 20 points of the final exam is necessary to pass the course.

Course curriculum

Not applicable.

Work placements

Not applicable.

Aims

The aim is to understand principles of computer forensics and the basic concepts used in a computer forensics examination; introduces techniques required for conducting a forensic analysis of systems and data.

Specification of controlled education, way of implementation and compensation for absences

Controlled activities include a project, computer exercises and the final exam. Missed labs will not be replaced.

Recommended optional programme components

Not applicable.

Prerequisites and corequisites

Not applicable.

Basic literature

Not applicable.

Type of course unit

Lecture

26 hod., optionally

Teacher / Lecturer

doc. Ing. Ondřej Ryšavý, Ph.D.
Ing. Radek Hranický, Ph.D.
doc. Ing. Petr Matoušek, Ph.D., M.A.

Syllabus

Introduction to Forensics Investigation
Data Acquisition Tools and Methods
Computer Forensics Tools
Data Recovery, Filesystem Examination
Data Analysis, Carving, Recovery Files
OS Forensics: Windows, Mac OS, Linux
Introduction to Mobile Forensics
Mobile Forensics Data Acquisition and Analysis
Network Traffic Capturing and Processing
Network Data Analysis
Network Device Forensics
IoT Forensics
Cryptocurrencies

Laboratory exercise

13 hod., compulsory

Teacher / Lecturer

doc. Ing. Ondřej Ryšavý, Ph.D.
Ing. Radek Hranický, Ph.D.
doc. Ing. Petr Matoušek, Ph.D., M.A.

Syllabus

Disk Imaging and Data Acquisition
Digital Forensics using Autopsy
Mobile data acquisition and analysis using MobilEdit
Network Forensics using Wireshark
Network Forensics: Flow and Log Analysis
Digital Forensics of Cryptocurrencies

Project

13 hod., compulsory

Teacher / Lecturer

doc. Ing. Petr Matoušek, Ph.D., M.A.
doc. Ing. Ondřej Ryšavý, Ph.D.
Ing. Radek Hranický, Ph.D.

Syllabus

Performing the investigation of the selected cases. Solving the cases and writing the report.

VUT

Faculties

University Institutes

Parts

Digital Forensics (in English)

Type of course unit