UnitLevel 3Undergraduate

FIT3168 IT forensics

Faculty of Information Technology

FIT3168 IT forensics is a level 3, 6-credit-point, undergraduate unit from the Faculty of Information Technology, offered in 2023 in Semester 2 at Clayton. It needs FIT2093.

Credit points
6
Offered in 2023
Semester 2
Clayton
Assessment
No exam
4 tasks
Workload
144 hours
per semester

This is the 2023 handbook entry. See the 2027 entry.

Reviews

No reviews yet

No reviews yet. Be the first to review FIT3168.

Requisites

Before FIT3168

Prerequisites

Pass these before you enrol.

After FIT3168

No unit lists FIT3168 as a prerequisite in the 2023 handbook.

Overview

This unit provides a broad coverage of digital ICT forensics. You will examine definitions of evidence as they apply to investigations involving the seizure and examination of information technology devices. The unit will introduce you to various tools, techniques and algorithms that may be employed by investigators for acquisition, preservation and analysis of evidence. Disk-based (local) and network (remote) forensic environments will be explored. You will also learn of the impediments and complicating factors that can threaten forensic investigations.

Offerings in 2023

Teaching periodCampusMode
Second semesterClaytonOn campus

Assessment

  • Assessment 1 Enterprise Forensic ReadinessAssignment
    10%
  • Assessment 2Assignment
    30%
  • Assessment 3Other
    30%
  • Assessment 4Other
    30%

Learning outcomes

When you finish this unit, you should be able to:

  1. 1

    Explain the motivations and landscape of forensic investigations in an IT context;

  2. 2

    Explain the relevant legal definitions and frameworks that apply to digital forensic investigations;

  3. 3

    Select appropriate tools and algorithms to perform forensic investigations and acquire relevant evidence;

  4. 4

    Apply and evaluate forensic techniques in local media-based an network-based environments;

  5. 5

    Report on forensic findings in a clear and concise manner.

  6. 6

    Demonstrate how digital forensics can be employed by Police and Tax officials in a court of law.

Workload and teaching

  • Workshops36 hours
  • Teaching approachActive learning

Minimum total expected workload to achieve the learning outcomes for this unit is 144 hours per semester typically comprising a mixture of scheduled online and face to face learning activities and independent study. Independent study may include associated reading and preparation for scheduled teaching activities.

Learning resources

Required resources

Eoghan Casey. (2010) Handbook of Digital Forensics and Investigation. Elsevier Academic Press

Chuck Easttom. (2010) Computer crime, investigation, and the law. (1st edition) Course Technology PTR.

Joakim Kävrestad. (2017) Guide to Digital Forensics: a Concise and Practical Introduction. Springer.

John Sammons. (2012) The basics of digital forensics. (1st edition) Elsevier Academic Press.

Where it fits

FIT3168 is part of 3 areas of study in the 2023 handbook.

Contacts

Chief Examiners
Dr Amin Sakzad

Common questions

What are the prerequisites for FIT3168?

You need FIT2093 before you enrol.

When is FIT3168 offered?

In 2023, FIT3168 runs in Semester 2 at Clayton.

How much work is FIT3168?

The handbook expects about 144 hours of study across the semester. No students have rated its difficulty yet.

Does FIT3168 have an exam?

No. FIT3168 has 4 assessment tasks and no exam.

Which majors and minors include FIT3168?

FIT3168 is part of Cybersecurity and Software engineering.

More details

Credit points
6
Level
3
Study level
Undergraduate
Faculty
Faculty of Information Technology
Type
Coursework
EFTSL
0.125
Student contribution
SCA Band 2
Study abroad
Available