KV5041 - Digital Forensics Incident Response

You will learn through lectures, interactive labs, and independent learning. Lectures are the main vehicle for introducing fundamental concepts and principles and for providing context and motivation. You will be expected to prepare for lecture topics and deepen your understanding of course material by studying appropriate literature. Interactive lab sessions are a key element in providing you with opportunities to identify, apply and evaluate appropriate techniques. This approach is exemplified in this module by its requirements for you to demonstrate an understanding of theoretical concepts and an ability to adopt a more critical and reflective approach based on a broader understanding of digital security and forensic challenges and their solutions.

During your lab classes, academic support will be available to you to guide you through the exercises, with a strong focus on practical work in Northumbria’s CIS building computer labs, which are fully equipped with the latest industry-standard software.

The University’s eLearning Portal offers access to all lecture and seminar materials to reinforce your learning. In addition, the university library offers support for all students through providing electronic resources.

All modules at Northumbria include a range of reading materials that students are expected to engage with. The reading list for this module can be found at: http://readinglists.northumbria.ac.uk
(Reading List service online guide for academic staff this containing contact details for the Reading List team – http://library.northumbria.ac.uk/readinglists)

Knowledge & Understanding:
ML01 – Acquire an in-depth understanding of the current digital security landscape.
ML02 - Identify and apply appropriate digital forensic processes and procedures.
ML03 – Evaluate the core concepts, knowledge and practice of digital security and forensics that have developed through research

Intellectual / Professional skills & abilities:
ML04 – Identify and evaluate findings obtained from digital security or forensics investigations and apply appropriate legal and procedural principles.

Personal Values Attributes (Global / Cultural awareness, Ethics, Curiosity) (PVA):
ML05 – Communicate and present written findings in such ways that they meet the required standards

The main element of summative assessment (100%) will be a final assignment that brings together all your new skills and techniques. You will investigate a mock case study culminating in the production of a written report. The word limit will be 3500 words.
You will receive both informative and confirmatory feedback on your assessments.
This assessment addresses all Module Learning Outcomes. On an on-going basis you will also receive formative feedback on in-class exercises you are required to complete.

NA

NA

This module will provide you with the skills and knowledge to forensically respond to cybersecurity incidents. You will analyse and examine digital security and forensic case studies using the latest industry specialist software, giving invaluable hands-on practical use. You will be given rounded information on the principles and practice of digital security and forensics from theoretical and technical perspectives. You will be encouraged to analyse academic articles, discuss the current state of knowledge, and identify further questions to be addressed. The theoretical material on digital security and forensics will be re-enforced through the analysis and discussion of case studies in seminar sessions as well as sessions on the use of security and digital forensics tools in the analysis of chosen case studies in lab-based practical sessions. You will develop analytical and evaluative skills in the appropriate use of industry software for solving problems in a variety of environments and problem situations. The ethical responsibilities of studying digital security and forensics and the need to address personal and professional integrity will be included in the module.