Digital Forensics and Electronic Discovery

Course aim

To provide students with the theoretical frameworks and practical skills required to effectively undertake digital forensics and electronic discovery investigations.

Course content

In this course, students will gain a working knowledge of the following:

• The similarities and differences between digital forensics and electronic discovery, through understanding and examination of prominent theoretical frameworks in these fields.
• The process of identifying sources of volatile and non-volatile digital evidence.
• Key methods used by practitioners to preserve and verify the validity of digital evidence.
• Practical techniques for analysing datasets to recover specific forensic artefacts.
• Presentation methods appropriate for commercial and legal evidential reporting.

Textbook(s)

Nil

Prerequisite(s)

Common to all relevant programs
Subject Area & Catalogue Number	Course Name
INFT 3015	Network Security

Corequisite(s)

Nil

Teaching method

Component	Duration
INTERNAL, MAWSON LAKES
Seminar	1.5 hours x 13 weeks
Computer Practical	2 hours x 13 weeks
EXTERNAL, MAWSON LAKES, ONLINE
External	N/A x 13 weeks

Note: These components may or may not be scheduled in every study period. Please refer to the timetable for further details.

Assessment

Continuous assessment, Major essay, Test

Fees

EFTSL*: 0.125
Commonwealth Supported program (Band 2)
To determine the fee for this course as part of a Commonwealth Supported program, go to:
How to determine your Commonwealth Supported course fee. (Opens new window)

Fee-paying program for domestic and international students
International students and students undertaking this course as part of a postgraduate fee paying program must refer to the relevant program home page to determine the cost for undertaking this course.

Non-award enrolment
Non-award tuition fees are set by the university. To determine the cost of this course, go to:
How to determine the relevant non award tuition fee. (Opens new window)

Not all courses are available on all of the above bases, and students must check to ensure that they are permitted to enrol in a particular course.

* Equivalent Full Time Study Load. Please note: all EFTSL values are published and calculated at ten decimal places. Values are displayed to three decimal places for ease of interpretation.