FIT5223 · Monash University
IT forensics
- Credit points
- 6
- Level
- 5
- Workload
- ≈ 12 h / week
- Faculty
- Information Technology
What it covers
This unit provides a broad coverage of (digital) IT forensics. You will examine definitions of evidence as they apply to investigations involving the seizure and examination of information technology devices. The unit will introduce you to various tools, techniques and algorithms that may be employed by investigators for acquisition, preservation, and analysis of evidence. Disk-based (local) and network (remote) forensic environments will be explored. You will also learn of the impediments and complicating factors that can threaten forensic investigations.
Assessment
| Task | Type | Weight |
|---|---|---|
| Assignment 4 Practical Test (memory-based forensics) | Quiz / Test | 25% |
| Assignment 1 Enterprise Forensic Readiness | Written | 10% |
| Assignment 3 Practical Test (network-based forensics) | Quiz / Test | 25% |
| Assignment 2 Practical Test (disk-based forensics) | Quiz / Test | 25% |
| Assignment 5 Forensics academic paper | Artefact | 15% |
When and where
| Teaching period | Campus | Mode |
|---|---|---|
| Second semester | Clayton | On-campus |