IMT4012 Digital Forensics I
(Bachelors are also attending this course with a different subject code, IMT3551)

Evidence acquisition, analysis and reporting

• 4 lectures
  
• Presentation of chosen paper (in groups)
  
• Week of lab work (19, 22 and 23rd of November)
  
• Written exam 3 hours (40%) - 18th December
  
• Project work (40%) - Groups of 4-6 people (deliver by 7th December)
  
• Oral presentation of group work (20% - 10% for each of them)
  

Lecture notes

• Session 1 (30th October)
  
• Session 2 (13th November)
  
• Lab week 47
  
• Session 3 (Changed from 27th --> 20th November)
  
• Session 4 (4th December)
  

Our paper presentation

S1_DF1_Persistence_of_memory
size 811.2 KiB
sha256: 9139244d3b...b932fd0181

Our project paper

Mobile_Forensics_-_Comparison_of_extraction_and_analyzing_methods_of_iOS_and_Android
size 1.2 MiB
sha256: 8147ee8f16...4bb42ab065

Mind map

http://app.wisemapping.com/c/maps/86006/public

Books

Book: Digital Forensics with open source tools Cory Altheide and Harlan Carvey, 1 edition (372,-).

Online (free): Forensic Discovery Dan Farmer and Wietse Venema, 2005 edition (source).