CS448

Undergraduate

As digital technologies pervade every aspect of society, the prevalence of cybercrime and technology-enabled offences has surged. Digital forensics is the science of identifying, collecting, preserving, analysing, and presenting digital evidence in a legally sound and systematic manner. In this course, students will be introduced to the principles and practices that underpin modern digital forensics. They will learn how to investigate compromised systems, recover deleted or hidden information, trace cyberattacks, and handle evidence so that it remains admissible in court. Beyond technical tools, the course also addresses the ethical, legal, and organisational dimensions of digital investigations. Through a combination of lectures, case studies, and hands-on labs, students will acquire both conceptual understanding and practical experience in forensic analysis of filesystems, networks, and mobile/cloud environments.