The web-site is now in readonly mode. Login and registration are disabled. (28 June 2019)

Simulating an investigation in computer forensics

To develop students’ skills in working with data, give them a simulated investigation and assess their notebooks and final reports.

Cloud created by:

The Cloudworks Team
29 April 2008

For this postgraduate course on computer forensics and investigations, students undertake a simulated investigation across three weeks, to develop their ability to identify, collect, preserve and analyse digital evidence in a way that will be considered legally, forensically and scientifically sound. The scenario is of data theft from a company. Students are supplied with evidence, such as an image of a suspect’s computer hard disc, and have already been taught the use of analytical tools. They are encouraged to help each other, though collaboration is not a requirement For assessment, they submit their notes, such as a professional investigator would keep, of each of the things that they did and what the outcome was, along with a final report of their findings. [Blaine Price]

Extra content

Embedded Content


Contribute to the discussion

Please log in to post a comment. Register here if you haven't signed up yet.