ITI5223 IT forensics
Faculty of Information Technology
ITI5223 IT forensics is a level 5, 6-credit-point, postgraduate unit from the Faculty of Information Technology. It isn't offered in 2025. It has no prerequisites.
- Credit points
- 6
- Offered in 2025
- Other periods
- Indonesia
- Assessment
- No exam
- 3 tasks
- Workload
- 144 hours
- per semester
This is the 2025 handbook entry. See the 2027 entry.
Reviews
No reviews yetNo reviews yet. Be the first to review ITI5223.
Requisites
Before ITI5223
Corequisites
Pass these before, or take them in the same semester.
Prohibitions
You can't enrol if you have passed any of these.
After ITI5223
No unit lists ITI5223 as a prerequisite in the 2025 handbook.
Enrolment rules
This unit is only available to students enrolled at the Indonesia campus.
Equivalent units
The same content under another code. Only one of them counts.
Overview
This unit provides a broad coverage of (digital) IT forensics. You will examine definitions of evidence as they apply to investigations involving the seizure and examination of information technology devices. The unit will introduce you to various tools, techniques and algorithms that may be employed by investigators for acquisition, preservation, and analysis of evidence. Disk-based (local) and network (remote) forensic environments will be explored. You will also learn of the impediments and complicating factors that can threaten forensic investigations.
Offerings in 2025
| Teaching period | Campus | Mode |
|---|---|---|
| Monash Indonesia term 2 | Indonesia | Blended |
| Monash Indonesia term 4 | Indonesia | Blended |
Assessment
- Assignment 1Exercise30%
- Assignment 2Exercise30%
- Assignment 3Exercise40%
Learning outcomes
When you finish this unit, you should be able to:
- 1
explain the motivations and landscape of forensic investigations in an IT context;
- 2
explain the relevant legal definitions and frameworks that apply to digital forensic investigations;
- 3
select appropriate tools and algorithms to perform forensic investigations and acquire relevant evidence;
- 4
apply and evaluate forensic techniques in local media-based and network-based environments;
- 5
report on forensic findings in a clear and concise manner;
- 6
demonstrate how digital forensics can be employed by Police and Tax officials in a court of law.
Workload and teaching
- Lectures24 hours
- Laboratories24 hours
- Teaching approachActive learning
Minimum total expected workload to achieve the learning outcomes for this unit is 144 hours per semester typically comprising a mixture of scheduled online and face to face learning activities and independent study. Independent study may include associated reading and preparation for scheduled activities. The unit requires on average three/four hours of scheduled activities per week. Scheduled activities may include a combination of teacher directed learning and online engagement.
Learning resources
Recommended resources
- Eoghan Casey. (2010) Handbook of Digital Forensics and Investigation. Elsevier Academic Press.
- Chuck Easttom. (2010) Computer crime, investigation, and the law. (1st edition) Course Technology PTR.
- Joakim Kavrestad. (2017) Guide to Digital Forensics: a Concise and Practical Introduction. Springer.
- Joakim Kavrestad. (2018) Fundamentals of Digital Forensics, Theory, Methods, and Real-life Applications. Springer.
- John Sammons. (2012) The basics of digital forensics. (1st edition) Elsevier Academic Press.
Contacts
- Chief Examiners
- Associate Professor Amin Sakzad
Common questions
What are the prerequisites for ITI5223?
None, but you must take ITI5163 before or alongside it.
When is ITI5223 offered?
ITI5223 has no offerings listed in the 2025 handbook.
How much work is ITI5223?
The handbook expects about 144 hours of study across the semester. No students have rated its difficulty yet.
Does ITI5223 have an exam?
No. ITI5223 has 3 assessment tasks and no exam.