Simulating an investigation in computer forensics
To develop students’ skills in working with data, give them a simulated investigation and assess their notebooks and final reports.
For this postgraduate course on computer forensics and investigations, students undertake a simulated investigation across three weeks, to develop their ability to identify, collect, preserve and analyse digital evidence in a way that will be considered legally, forensically and scientifically sound.
The scenario is of data theft from a company. Students are supplied with evidence, such as an image of a suspect’s computer hard disc, and have already been taught the use of analytical tools. They are encouraged to help each other, though collaboration is not a requirement
For assessment, they submit their notes, such as a professional investigator would keep, of each of the things that they did and what the outcome was, along with a final report of their findings.
Add extra content