School: Science

This unit information may be updated and amended immediately prior to semester. To ensure you have the correct outline, please check it again at the beginning of semester.

Please note that there may be some modifications to the assessment schedule promoted in Handbook for Semester 1 2023 Units. All assessment changes will be published by 20th February 2023. All students are reminded to check the handbook at the beginning of semester to ensure they have the correct outline.

  • Unit Title

    Digital Forensics
  • Unit Code

    CSI6205
  • Year

    2023
  • Enrolment Period

    1
  • Version

    5
  • Credit Points

    20
  • Full Year Unit

    N
  • Mode of Delivery

    On Campus
    Online
  • Unit Coordinator

    Dr Patryk Sebastian SZEWCZYK

Description

This unit introduces students to digital forensic tools, techniques and methods used to recover and examine digital evidence from electronic devices. Modern forensic computing involves the preservation, identification and analysis of digital based evidence acquired from volatile or persistent storage locations. Digital evidence is not examinable by conventional computing access methods, so specialised software tools, techniques and processes must be used to preserve and recover this evidence in a forensically valid manner.

Prerequisite Rule

Students must have passed CSI6199.

Learning Outcomes

On completion of this unit students should be able to:

  1. Evaluate digital forensic case studies, tools, methods, file systems and/or digital artefacts.
  2. Apply appropriate tools and techniques to complete digital forensic tasks.
  3. Produce documentation to support the outcomes of a digital forensic investigation.

Unit Content

  1. Contemporary digital forensic issues and trends.
  2. Planning and report writing.
  3. Data acquisition and hashing.
  4. Data carving and recovery.
  5. Ethical and legal issues in digital forensics.
  6. File systems.
  7. Digital forensic methods and models.
  8. Designing a digital forensic lab.
  9. Analysis and validation of digital evidence.

Learning Experience

ON-CAMPUS

Students will attend on campus classes as well as engage in learning activities through ECU's LMS

JoondalupMount LawleySouth West (Bunbury)
Semester 213 x 2 hour workshopNot OfferedNot Offered

For more information see the Semester Timetable

ONLINE

Students will engage in learning experiences via ECU’s LMS as well as additional ECU learning technologies

Assessment

GS1 GRADING SCHEMA 1 Used for standard coursework units

Students please note: The marks and grades received by students on assessments may be subject to further moderation. All marks and grades are to be considered provisional until endorsed by the relevant School Progression Panel.

ON CAMPUS
TypeDescriptionValue
PresentationRecorded workshop20%
TestReview tests20%
PresentationForensic investigation presentation20%
Case StudyForensic investigation case study40%
ONLINE
TypeDescriptionValue
PresentationRecorded workshop20%
TestReview tests20%
PresentationForensic investigation presentation20%
Case StudyForensic investigation case study40%

Disability Standards for Education (Commonwealth 2005)

For the purposes of considering a request for Reasonable Adjustments under the Disability Standards for Education (Commonwealth 2005), inherent requirements for this subject are articulated in the Unit Description, Learning Outcomes and Assessment Requirements of this entry. The University is dedicated to provide support to those with special requirements. Further details on the support for students with disabilities or medical conditions can be found at the Access and Inclusion website.

Assessment

Students please note: The marks and grades received by students on assessments may be subject to further moderation. Informal vivas may be conducted as part of an assessment task, where staff require further information to confirm the learning outcomes have been met. All marks and grades are to be considered provisional until endorsed by the relevant School Progression Panel.

Academic Integrity

Integrity is a core value at Edith Cowan University, and it is expected that ECU students complete their assessment tasks honestly and with acknowledgement of other people's work as well as any generative artificial intelligence tools that may have been used. This means that assessment tasks must be completed individually (unless it is an authorised group assessment task) and any sources used must be referenced.

Breaches of academic integrity can include:

Plagiarism

Copying the words, ideas or creative works of other people or generative artificial intelligence tools, without referencing in accordance with stated University requirements. Students need to seek approval from the Unit Coordinator within the first week of study if they intend to use some of their previous work in an assessment task (self-plagiarism).

Unauthorised collaboration (collusion)

Working with other students and submitting the same or substantially similar work or portions of work when an individual submission was required. This includes students knowingly providing others with copies of their own work to use in the same or similar assessment task(s).

Contract cheating

Organising a friend, a family member, another student or an external person or organisation (e.g. through an online website) to complete or substantially edit or refine part or all of an assessment task(s) on their behalf.

Cheating in an exam

Using or having access to unauthorised materials in an exam or test.

Serious outcomes may be imposed if a student is found to have committed one of these breaches, up to and including expulsion from the University for repeated or serious acts.

ECU's policies and more information about academic integrity can be found on the student academic integrity website.

All commencing ECU students are required to complete the Academic Integrity Module.

Assessment Extension

In some circumstances, Students may apply to their Unit Coordinator to extend the due date of their Assessment Task(s) in accordance with ECU's Assessment, Examination and Moderation Procedures - for more information visit https://askus2.ecu.edu.au/s/article/000001386.

Special Consideration

Students may apply for Special Consideration in respect of a final unit grade, where their achievement was affected by Exceptional Circumstances as set out in the Assessment, Examination and Moderation Procedures - for more information visit https://askus2.ecu.edu.au/s/article/000003318.

CSI6205|5|1

School: Science

This unit information may be updated and amended immediately prior to semester. To ensure you have the correct outline, please check it again at the beginning of semester.

  • Unit Title

    Digital Forensics
  • Unit Code

    CSI6205
  • Year

    2023
  • Enrolment Period

    2
  • Version

    5
  • Credit Points

    20
  • Full Year Unit

    N
  • Mode of Delivery

    On Campus
    Online
  • Unit Coordinator

    Dr Patryk Sebastian SZEWCZYK

Description

This unit introduces students to digital forensic tools, techniques and methods used to recover and examine digital evidence from electronic devices. Modern forensic computing involves the preservation, identification and analysis of digital based evidence acquired from volatile or persistent storage locations. Digital evidence is not examinable by conventional computing access methods, so specialised software tools, techniques and processes must be used to preserve and recover this evidence in a forensically valid manner.

Prerequisite Rule

Students must have passed CSI6199.

Learning Outcomes

On completion of this unit students should be able to:

  1. Evaluate digital forensic case studies, tools, methods, file systems and/or digital artefacts.
  2. Apply appropriate tools and techniques to complete digital forensic tasks.
  3. Produce documentation to support the outcomes of a digital forensic investigation.

Unit Content

  1. Contemporary digital forensic issues and trends.
  2. Planning and report writing.
  3. Data acquisition and hashing.
  4. Data carving and recovery.
  5. Ethical and legal issues in digital forensics.
  6. File systems.
  7. Digital forensic methods and models.
  8. Designing a digital forensic lab.
  9. Analysis and validation of digital evidence.

Learning Experience

ON-CAMPUS

Students will attend on campus classes as well as engage in learning activities through ECU's LMS

JoondalupMount LawleySouth West (Bunbury)
Semester 213 x 2 hour workshopNot OfferedNot Offered

For more information see the Semester Timetable

ONLINE

Students will engage in learning experiences via ECU’s LMS as well as additional ECU learning technologies

Assessment

GS1 GRADING SCHEMA 1 Used for standard coursework units

Students please note: The marks and grades received by students on assessments may be subject to further moderation. All marks and grades are to be considered provisional until endorsed by the relevant School Progression Panel.

ON CAMPUS
TypeDescriptionValue
PresentationRecorded workshop20%
TestReview tests20%
PresentationForensic investigation presentation20%
Case StudyForensic investigation case study40%
ONLINE
TypeDescriptionValue
PresentationRecorded workshop20%
TestReview tests20%
PresentationForensic investigation presentation20%
Case StudyForensic investigation case study40%

Disability Standards for Education (Commonwealth 2005)

For the purposes of considering a request for Reasonable Adjustments under the Disability Standards for Education (Commonwealth 2005), inherent requirements for this subject are articulated in the Unit Description, Learning Outcomes and Assessment Requirements of this entry. The University is dedicated to provide support to those with special requirements. Further details on the support for students with disabilities or medical conditions can be found at the Access and Inclusion website.

Assessment

Students please note: The marks and grades received by students on assessments may be subject to further moderation. Informal vivas may be conducted as part of an assessment task, where staff require further information to confirm the learning outcomes have been met. All marks and grades are to be considered provisional until endorsed by the relevant School Progression Panel.

Academic Integrity

Integrity is a core value at Edith Cowan University, and it is expected that ECU students complete their assessment tasks honestly and with acknowledgement of other people's work as well as any generative artificial intelligence tools that may have been used. This means that assessment tasks must be completed individually (unless it is an authorised group assessment task) and any sources used must be referenced.

Breaches of academic integrity can include:

Plagiarism

Copying the words, ideas or creative works of other people or generative artificial intelligence tools, without referencing in accordance with stated University requirements. Students need to seek approval from the Unit Coordinator within the first week of study if they intend to use some of their previous work in an assessment task (self-plagiarism).

Unauthorised collaboration (collusion)

Working with other students and submitting the same or substantially similar work or portions of work when an individual submission was required. This includes students knowingly providing others with copies of their own work to use in the same or similar assessment task(s).

Contract cheating

Organising a friend, a family member, another student or an external person or organisation (e.g. through an online website) to complete or substantially edit or refine part or all of an assessment task(s) on their behalf.

Cheating in an exam

Using or having access to unauthorised materials in an exam or test.

Serious outcomes may be imposed if a student is found to have committed one of these breaches, up to and including expulsion from the University for repeated or serious acts.

ECU's policies and more information about academic integrity can be found on the student academic integrity website.

All commencing ECU students are required to complete the Academic Integrity Module.

Assessment Extension

In some circumstances, Students may apply to their Unit Coordinator to extend the due date of their Assessment Task(s) in accordance with ECU's Assessment, Examination and Moderation Procedures - for more information visit https://askus2.ecu.edu.au/s/article/000001386.

Special Consideration

Students may apply for Special Consideration in respect of a final unit grade, where their achievement was affected by Exceptional Circumstances as set out in the Assessment, Examination and Moderation Procedures - for more information visit https://askus2.ecu.edu.au/s/article/000003318.

CSI6205|5|2