This module is a resource for lecturers  

 

Additional teaching tools

 

Cases in the Media

These cases can be used as stimulate discussion during the lecture:

 

Mock Exercises

Lecturers can use the following information to create forensic data acquisition mock exercises:

There are several types of data imaging such as static drive based (ColdSnap), live system-based (HotSnap), and network-based etc. To image the drive or network, there are hardware and software write blocker solutions. A sample guide about write blockers can be found here.

Example of a hardware-based solution: Tableau Forensic Imager TX1

Image source; source guide.

You can identify acquisition steps from the above user guide and create an exercise.

Example of a software based solutions: FTK Imager

Image source.

A sample guide from which a mock exercise can be created using this tool can be found here.

Example of a digital forensics tool: EnCase

Image source.

A sample guide from which a mock exercise can be created using this tool can be found here.

Example of a network-based tool: Wireshark

Image source.

A sample guide from which a mock exercise can be created using this tool can be found here.

 

Websites

 

Videos

  • American Bar Association (ABA) Criminal Justice Section, Forensics 2016: Issues in Accreditation (Part 1) (length: 42:24). » The video includes the first part of a panel discussion by the American Bar Association, which covers digital forensics accreditation practices in the United States.
  • American Bar Association (ABA) Criminal Justice Section, Forensics 2016: Issues in Accreditation (Part 2) (length: 32:22). » The video includes the second part of a panel discussion by the American Bar Association, which covers digital forensics accreditation practices in the United States.

 

Back to top