Open Source Forensics

- Digital investigations and evidence - Chain of custody and forensic soundness - Timeline analysis - Live system forensics - File system forensics -Forensic reconstructions -Internet and network forensics -Cybercrime law -Advanced topics if time permits

Students are able to explain the fundamental principles of digital forensics. The students are able to survey a digital crime scene and to acquire, analyze and present digital evidence in a forensically sound manner. The students are further expected to be able to scientifically document theoretical and experimental results related to forensic investigations, and to evaluate the validity of evidence presented by another party. After completion of the course, the student shall demonstrate the following competency: Knowledge Digital Forensics methodology with a solid understanding of requirements for handling digital evidence, with an emphasis on evidence integrity and chain of custody Skills -Forensic acquisition of digital evidence from computer and network media -Live system forensics and evaluation of order of volatility -Evidence analysis with timeline analysis and forensic reconstruction -Scientific documentation of forensic acquisition and analysis General Competency -Legal aspects of cyber crime and cyber crime investigations -The role of expert witnesses and digital evidence in the context of legal proceedings

Forelesninger|Lab.øvelser|Prosjektarbeid Utfyllende informasjon: The course will be made accessible for both campus and remote students. Every student is free to choose the pedagogic arrangement form that is best fitted for her/his own requirement. The lectures in the course will be given on campus and are open for both categories of students. All the lectures will also be available on Internet through GUC¿s learning management system (ClassFronter). Obligatoriske arbeidskrav: Announced at course start