SEC206: Forensics

Introduction

The « Forensic » module is designed for Master’s level students seeking to dive deep into digital forensics, a crucial field in cybersecurity. This course covers the comprehensive analysis of digital evidence, cybercrime investigation techniques, and the legal aspects of digital investigations, equipping students with the necessary skills to tackle complex cybersecurity challenges.

Objectives

To understand the fundamental principles and methodologies used in digital forensics, including the identification, preservation, and analysis of digital evidence.

To develop the skills necessary for conducting thorough forensic analyses of digital devices and systems.

To gain practical experience in handling and investigating cybercrime incidents.

To understand the legal and ethical considerations in digital forensics.

The Plan

Module 1: Introduction to Computer Forensic

Module 2: Windows Forensic

Module 3: Linux Forensic

Module 4: Digital Forensics: Processus & Tools

Module 5: Reporting & Presenting Forensics

Project: Study Case - Data Leakage

The Exam

The module’s assessment is based on a comprehensive 14-hour project focusing on the forensic study of a real-world case. Students are required to conduct a detailed analysis, culminating in a report that outlines their findings, methodologies, and recommendations. This report is then presented to a jury, acting as a corporate executive board, in a scenario set in the aftermath of a cyberattack. This immersive evaluation method not only tests the students’ technical prowess but also their ability to communicate complex information effectively and make informed decisions under pressure.