Cybercrime, Digital Traces and Forensic Data Analysis

6 EC

Semester 2, period 4

5274CDTF6Y

Owner Master Forensic Science
Coordinator Jaap van Ginkel
Part of Master Forensic Science, year 1
Links Visible Learning Trajectories

Course manual 2024/2025

Course content

The following topics/subjects will be addressed:

Digital Forensics and cybercrime intro 
Acquisition, Hashing/integrity
Live forensics/ memory forensics
(Smart)phone forensics
Embedded/Device forensics
Network forensics
Multimedia forensics
Big Data forensics

Objectives

  • 1. explain the theory and application of scientific principles and techniques involved in digital forensics.
  • 2. select, re-use, adapt and apply relevant computer science techniques to (parts of) a digital crime scene.
  • 3. analyse and organise a digital data set.
  • 4. generate alternative hypotheses and prioritize items of digital evidence.
  • 5. evaluate and judge the methods used in digital forensics investigation based on the appropriateness of the methods.
  • 6. independently conduct scientific research, to analyse and interpret the data, to draw critical conclusions based on the findings and to make recommendations for future work.

Teaching methods

  • Lecture
  • Presentation/symposium
  • Self-study
  • Computer lab session/practical training

Learning activities

Activity

Hours

Hoorcollege

26

Presentatie

8

Werkcollege

52

Self study

82

Total

168

(6 EC x 28 uur)

Attendance

This programme does not have requirements concerning attendance (OER part B).

Additional requirements for this course:

Attending all scheduled education activities is strongly advised. By doing so, you actively contribute to a lively learning community and significantly improve your chances of successfully completing the course. The designated mandatory activities play a crucial role in achieving the course objectives and are essential for your overall progress.

Additional requirements for this course:
It is presupposed that all students will be present in class.

Assessment

Item and weight Details

Final grade

70%

Report

30%

Presentation

All components will be graded on a scale of 1-10. In order to pass the course, all components and the final grade have to be sufficient, i.e. at least a five and a half. When a student has not fulfilled this requirement, the examiner will register the mark ‘did not fulfill all requirements’ (NAV) whether or not the averaged grade is sufficient. The components will be weighted as follows: 

1. report (70%)
2. presentation (30%)

The students will work in groups on the project.

LO Tested in component EQ 1  EQ 2  EQ 3  EQ 4  EQ 5  EQ 6  EQ 7  EQ 8  EQ 9  EQ 10 
1 1, 2   x                
2 1, 2    x                
3 1, 2    x                
4 1, 2      x              
5 1, 2    x                
6 1, 2        x            

Table of specification: the relation between the Learning Outcomes (LO) of the course, the assessment components of the course and the Exit Qualifications (EQ) of the Master’s Forensic Science (described in the Introduction in the Course Catalogue)

Fraud and plagiarism

The 'Regulations governing fraud and plagiarism for UvA students' applies to this course. This will be monitored carefully. Upon suspicion of fraud or plagiarism the Examinations Board of the programme will be informed. For the 'Regulations governing fraud and plagiarism for UvA students' see: www.student.uva.nl

Contact information

Coordinator

  • Jaap van Ginkel