Module 4: Digital Forensics

Time Required: 1 Hour

4.1 Module outline and expected learning outcomes

• Digital forensics is the identification, recovery and analysis of data from electronic devices

4.2 Common data structures

• Data structures are one of the fundamentals of Computer Science and refer to the means or organising and storing data in computers
• How data is stored physically on drives

4.3 Introduction to Binary and Hex

• Introduction to the mathematical concepts that enable computers to store, process and communicate information
• Convert positive denary whole numbers (0-255) into 2 hexadecimal numbers and vice versa
• Convert between binary and hexadecimal
• Explain the use of hexadecimal numbers to represent binary numbers

4.4 Forensic analysis on data

• Data acquisition and validation
• Introduction and comparisons of acquisition methods
• Validating forensic software
• Data hiding techniques
• How to capture a forensic image