Computer Forensics

This subject has the following teaching availabilities in 2008:

For the purposes of considering request for Reasonable Adjustments under the Disability Standards for Education (Cwth 2005), and Student Support and Engagement Policy, academic requirements for this subject are articulated in the Subject Overview, Learning Outcomes, Assessment and Generic Skills sections of this entry.

It is University policy to take all reasonable steps to minimise the impact of disability upon academic study, and reasonable adjustments will be made to enhance a student's participation in the University's programs. Students who feel their disability may impact on meeting the requirements of this subject are encouraged to discuss this matter with a Faculty Student Adviser and Student Equity and Disability Support: http://services.unimelb.edu.au/disability

This subject will enable an understanding of the practical and legal implications of the search, seizure and presentation of computer based evidence and computer forensic techniques that are employed at an electronic crime scene. It will include topics such as internet evidence and how to interpret mail and Usenet information. It will also provide valuable insight in to the management of an electronic crime scene.
Topics to be covered include:-

• Digital Evidence;
• Identification and analysis of software and hardware equipment affected;
• Identification and recovery process of affected files /systems;
• Identification of key components of affected computers including the re-creation of target computers, peripherals and files;
• Tracking tools and techniques for email;
• Network analysis and technology including abuses of networks and network evidence;
• Gathering & monitoring network traffic and network based intrusion detection systems and understanding event logs.

This subject is not available as a breadth subject.