Digital Forensics and Cyber Investigation MSc

Learn how to investigate computer-based evidence using common desktop operating systems. You explore how digital data is stored and how this can be examined in a forensic investigation. You are introduced to common operating and file-system artefacts that provide useful evidence or intelligence in a digital investigation. You are assessed by completing a 5000-word investigative report based on a practical scenario. Learning takes place in the digital forensic laboratory through a range of practical, embedded sessions.

You undertake a major, in-depth, individual study in an aspect of your course. Normally computing master’s projects are drawn from commercial, industrial or research-based problem areas. The project involves you in researching and investigating aspects of your area of study and then producing a major deliverable, for example software package or tool, design, web-site and research findings. You also critically evaluate your major deliverable, including obtaining third party evaluation where appropriate.

The major deliverable(s) are presented via a poster display, and also via a product demonstration or a conference-type presentation of the research and findings. The research, project process and evaluation is reported via a paper in the style of a specified academic conference or journal paper. The written report, the major deliverable and your presentation of the product are assessed.

The project management process affords supported opportunities for goal setting, reflection and critical evaluation of achievement.

Explore the core concepts and theory of digital forensics and incident response, and develop an industry skillset on professional practice requirements. You also gain an understanding of the principles of forensic investigation and incident response, as well as a fundamental knowledge of how computers store data. You are assessed through five short essays on a number of topics.

Explore the internet and network investigation techniques, learn topics including browser data investigations, Internet history recovery, cache reconstruction and the reverse engineering of browser log data. You learn about privacy-enhancing technologies, such as in-private browsing and its implications on forensic investigations. Discover suitable investigation techniques and methods for analysing and interpreting information related to an investigation into Internet technologies.

You explore the key legal issues to consider if you are anticipating a career in the IT industry. Key topics include introduction to the English legal system, intellectual property rights, computer crime, computer contracts and liability, privacy and data protection. You apply the legal principles studied to realistic scenarios and case studies from the real-world.

You are assessed through a continuous assessment which explores a current IT or computing issue from a legal and ethical point of view in the form of a mini investigative report.

This module focuses on mobile device investigation techniques within the newly emerging specialist sub-discipline of mobile forensic investigation. You learn topics such as data acquisition methods, advanced techniques such as jailbreaking/rooting, and methods of developer interaction with mobile devices, including JTAG and similar techniques. You also explore topics in professional practice, such as the challenge of data acquisition from handsets.

You gain an introduction to the Python programming language and its application to solving problems in digital innovation. This involves the principles of programming, the syntax and structure of Python, its relevant libraries and modules, and how it is incorporated in existing software tools. You form a solid foundation of producing software solutions to real-world problems.