Digital Forensics

1.Course titleDigital Forensics
2.CodeF18L3S093
3.Study programme—
4.Organizer of the study programme (unit, institute, department)Faculty of Computer Science and Engineering
5.Degree level (first, second, third cycle)First cycle
6.Academic year / semester6 / Summer
7.Number of ECTS credits6
8.Teacher—
9.Prerequisites for enrolling in the courseИнформациска безбедност
10.Course objectives (competences)After finishing the course student will know the fundamental principles and techniques needed to carry out digital forensic investigation. Student will obtain practical knowledge to work with different forensic tools for different operating systems.
11.Course content(1) Digital forensics fundamentals, analysis and managing the situation after a cyber attack
(1) File system forensics, forensic plan and Linux and Android technologies
(1) Memory forensics under Windows and Windows forensics tools
(1) Windows file system forensic tools
(1) Data acquisition in Windows/Linux systems
(1) Forensics analysis in Windows using registers and other artefacts.
(1) Rootkits kernel modules
(1) Techniques for structuring forensic data and data visualization
(1) Tools and techniques for discovering money laundry, fraud detection and cyber criminal
(1) Blockchain technology and Eterhium
(1) Using the blockchain technology in forensic applications
(1) Using chain analysis for integrity protection of the digital assets
12.Learning methodsLectures supported by slide presentations, interactive lectures, exercises (using equipment and software packages), teamwork, case studies, guest lecturers, independent preparation and defense of a project assignment and seminar paper, learning in an electronic environment (forums, consultations).
13.Total available time6 ECTS x 30 hours = 180 hours
14.Distribution of the available time30 + 45 + 15 + 15 + 75 = 180 hours
15.Forms of teaching activities
15.1.Lectures – theoretical teaching30 hours
15.2.Exercises (laboratory, auditory), seminars, team work45 hours
16.Other forms of activities
16.1.Project assignments15 hours
16.2.Individual assignments15 hours
16.3.Home study75 hours
17.Grading
17.1.Tests10 points
17.2.Seminar paper / project (presentation: written and oral)15 points
17.3.Activity and participation10 points
17.4.Final exam70 points
18.Grading criteria (points / grade)
up to 50 points5 (five) (F)
from 51 to 60 points6 (six) (E)
from 61 to 70 points7 (seven) (D)
from 71 to 80 points8 (eight) (C)
from 81 to 90 points9 (nine) (B)
from 91 to 100 points10 (ten) (A)
19.Requirements for signature and taking the final examcompleted activities 15.1 and 15.2
20.Language of instructionMacedonian and English
21.Method of monitoring teaching qualityinternal evaluation and survey mechanism
22.Literature
22.1.Required literature
No. Author Title Publisher Year
22.2.Additional literature
No. Author Title Publisher Year