21VT - 2DV704 - Digital Forensics - 7,5 hp - Växjö - 25%
Avsnittsöversikt
-
Digital Forensics
-
Welcome to the course on Digital Forensics. The course is run as a flipped classroom course with mandatory seminars on different subjects connected to the Digital Forensics Process. Before each seminar you will prepare yourself by reading sections from the textbook and watching online recordings. For some of the seminars you will also have to complete practical work that we will discuss during the seminar.
The textbook we will use for the course is Digital Forensics - André Årnes et.al
-
For this seminar you should read chapter 1 and 2 in the textbook and watch the attached video.
-
For this seminar you should read chapter 3 in the textbook and watch the related videos.
-
For this seminar you should read chapter 4 in the textbook and watch the related videos.
You should also get started on the practical work. Log into the DeterLab environment. Go through the material about the lab environment and how to work with it so you are familiar with it. On the seminar we will discuss any problems you might have to get started.
-
For this seminar you should read chapter 5 in the textbook and watch the related videos.
You should also have completed the Act 1 in DeterLab. Notice that you for this act you need to work in the DeterLab environment. You should produce a forensics report to present your results. The structure of the report should be influenced by "Writing a forensics report" (Se Module "Practical Work Details") but also make sure you meet the requirements in Act 1 for what should be included in the report.
-
For this seminar you should read chapter 6 in the textbook and watch the related videos.
You should also get started on Act 2 in DeterLab.
-
For this seminar you should read chapter 7 in the textbook and watch the related videos.
You should also complete and submit the report for Act 2 in DeterLab.
-
For this seminar you should just watch the related videos. There are no chapters in the textbook to cover.
You should also get started on Act 3 in DeterLab. -
This is a guest lecture from Combitech demonstrating forensic tools and how they work with digital forensics.
-
For this seminar you should read chapter 8 in the textbook and watch the related videos.
You should also complete and submit the report for Act 3 in DeterLab. -
This week we have a guest lecture from TrueSec.
-
-
Practical work will be performed on a system call DeterLab. This is a collaborative effort between many universities where different labs are developed and shared. In order to use the system you will need to have a user on the system. I will create these once the course has started.
https://www.isi.deterlab.net/file.php?file=/share/shared/Computerforensics
https://trac.deterlab.net/wiki/GettingStarted -