Course detail

Digital Forensics (in English)

FIT-DFAaAcad. year: 2023/2024

The course focuses on the role of computer forensics and the methods used in the investigation of computer crimes. The course explains the need for proper investigation and illustrates the process of locating, handling, and processing computer evidence. A detailed explanation of how to efficiently manage a forensics investigation and how to preserve and present evidence is covered.

Language of instruction

English

Number of ECTS credits

Mode of study

Not applicable.

Guarantor

doc. Ing. Ondřej Ryšavý, Ph.D.

Department

Department of Information Systems (UIFS)

Offered to foreign students

Of all faculties

Entry knowledge

Basic knowledge of operating systems, storage media, networks, and the ability to create simple programs.

Rules for evaluation and completion of the course

Project (15 points).
Hands-on labs (30 points). Missed labs can only be replaced if there is a serious obstacle in the study.
Final exam (55 points). Minimum of 20 points of the final exam is necessary to pass the course.

Controlled activities include the project (15 points), hands-on labs (30 points), and the final exam (55 points). Missed labs can only be replaced if there is a serious obstacle in the study.

Aims

The aim is to understand principles of computer forensics and the basic concepts used in a computer forensics examination; introduces techniques required for conducting a forensic analysis of systems and data.

Student acquaints basic concepts and principles of computer forensics and skills in a computer forensic examination.

Study aids

Not applicable.

Prerequisites and corequisites

Not applicable.

Basic literature

Daren Hayes, Practical Guide to Digital Forensics Investigations, Pearson IT Certification; 2nd edition, 2020. (EN)
Gerard Johansen: Digital Forensics and Incident Response: Incident response techniques and procedures to respond to modern cyber threats, Packt Publishing; 2nd edition, 2020 (EN)

Type of course unit

Lecture

26 hod., optionally

Teacher / Lecturer

doc. Ing. Ondřej Ryšavý, Ph.D.
Ing. Radek Hranický, Ph.D.
M.Sc. Nelson Makau Mutua

Syllabus

Investigation Techniques
Data Acquisition
Data Recovery and Analysis
Windows System Forensics
Microsoft 365 Forensics
Web Browser Forensics
Events and Logs
Network Forensics
Encryption Traffic Analysis
Memory Forensics
Malware Analysis
Password Recovery
Case Study

Laboratory exercise

13 hod., compulsory

Teacher / Lecturer

M.Sc. Nelson Makau Mutua
doc. Ing. Ondřej Ryšavý, Ph.D.
Ing. Radek Hranický, Ph.D.

Syllabus

Hands-on activities in the following areas:

Investigation Techniques Basics
Data Acquisition
Data Recovery and Analysis
Windows System Forensics
Microsoft 365 Forensics
Web Browser Forensics
Events and Logs
Network Forensics
Encryption Traffic Analysis
Memory Forensics
Malware Analysis
Password Recovery
Case Study

Project

13 hod., compulsory

Teacher / Lecturer

doc. Ing. Ondřej Ryšavý, Ph.D.

Syllabus

Performing the investigation of the selected cases. Solving the cases and writing the report.

Elearning

eLearning: currently opened course

VUT

Faculties

University Institutes

Parts

Digital Forensics (in English)

Type of course unit