Study program / study programs: INFORMATION TECHNOLOGY

Type and level of studies: Applied master’s studies

Subject: Digital Forensics

Status: elective

ECTS credits: 8

Course objective

The students learn about the process of reliable identification, saving and analyzing digital evidence, as well as making adequate conclusions.

Course outcome

The students have theoretical and practical knowledge of the basic digital forensics principles, rules and methods. They have also mastered the software and hardware tools for digital forensics.

Course content

Theoretical classes

  • Identifying, storing and analysing digital evidence
  • The basic digital forensics principles, rules and methods
  • The legal component of digital forensics
  • Digital evidence preparation
  • Restoring lost data
  • Using computer science and mathematics to collect, analyze, interpret and present digital evidence
  • Forensic tools for restoring and analyzing deleted, hidden and temporary files that cannot be accessed in the usual manner
  • Decoding
  • Software forensics
  • Operating system and file system forensics
  • Digital device forensics
  • Network forensics
  • Mobile device forensics
  • Software and hardware digital forensics tools (EnCase, Toolkit – FTK, VMware…)

Practical classes

  • Exercises
  • Learning about and working with software and hardware digital forensics tools