Computer Forensics Investigation and Response
Level 2 (CQFW Level 5), 20 Credits.
We have 1 upcoming course
(Tuesdays from 6:00 pm to 9:00 pm)
This course emphasises a “hands-on” approach to learning computer forensic investigation using open-source forensic tools. The course begins with the fundamental forensic concepts, including file system structures on both LINUX and Windows platforms, it then leads on to evidence acquisition, imaging, file recovery and analysis. The course also includes instruction on UK Law and report writing..
Who is this course for?
This course is designed as an introduction to computer forensic analysis, suitable for First responders and Law enforcement.
Learning and Teaching
This module includes a mix of traditional lectures and laboratory sessions. Each meeting is a mixture of short lectures and hands-on laboratory sessions.
Coursework and Assessment
To award credits we need to have evidence of the knowledge and skills you have gained or improved. Some of this has to be in a form that can be shown to external examiners so that we can be absolutely sure that standards are met across all courses and subjects.
During the course, you will be given assignments to be submitted to the course tutor. At the end of the course, there will be a class test.
The most important element of assessment is that it should enhance your learning. Our methods are designed to increase your confidence and we try very hard to devise ways of assessing you that are enjoyable and suitable for adults with busy lives.
File system essentials:
- Disk partioning
- File system layer
- Data layer
- Meta-data layer
- File Names
- FAT, FAT32, NTFS Ext2 and Ext3
- Windows specific
- Forensic definitions
- Incident response
- File system forensics
- Forensic tool kits, commercial and open-source
- Media Analysis
- Mobile Phone forensics
- Legal issues
- Report writing
- File system Forensic Analysis
By Brian Carrier
Addison Wesley ISBN 0-321-26817-2
- Forensic Computing – A Practitioner’s Guide
Tony Sammes and Brian Jenkinson
Springer ISBN 1-84628-397-3
Library and Computing Facilities
As a student on this course you are entitled to join and use the University library and computing facilities. You can find out more about these facilities on our website www.cardiff.ac.uk/learn under Student Information, or by ringing the Centre on (029) 2087 0000.
Accessibility of Courses
Our aim is access for all. We aim to provide a confidential advice and support service for any student with a long term medical condition, disability or specific learning difficulty. We are able to offer one-to-one advice about disability, pre-enrolment visits, liaison with tutors and co-ordinating lecturers, material in alternative formats, arrangements for accessible courses, assessment arrangements, loan equipment and Dyslexia screening. Please contact the Centre on (029) 2087 0000 for an information leaflet.
A range of further information can be found on our web site www.cardiff.ac.uk/learn or in Choices. This includes the times and dates of courses and an explanation of accreditation and credit levels.