Digital Forensic Science
- IMT3711 - 5 ECTS

On the basis of

  • IMT2282- Operating Systems
  • IMT2431- Data Communication and Network Security

Expected learning outcomes

Students are introduced to the fundamental principles of digitalforensics. The students will be expected to be able to survey a digitalcrime scene and to acquire, analyze, and present digital evidence in aforensically sound manner.


  • Digital investigations and evidence
  • Chain of evidence and forensic soundness
  • Timeline analysis
  • Live system forensics
  • File system forensics
  • Forensic reconstructions
  • Advanced topics if time permits

Teaching Methods

Laboratory work

Form(s) of Assessment


Form(s) of Assessment (additional text)

An overall evaluation based on a 100 point scale, where an ethical essay counts 1 point (at least 1 MUST be obtained), project work counts 49 points and final exam counts 50 points. Conversion from 100 point scale to A-F scale according to recommended conversion table. In specific circumstances, emneansvarlig can slightly adjust the limits in the conversion table to enforce compatibility with the qualitative descriptions on the A-F scale.

Grading Scale

Alphabetical Scale, A(best) – F (fail)

External/internal examiner

Internal examiner

Re-sit examination


Coursework Requirements

Will be announced later

Teaching Materials

  • Dan Farmer and Wietse Venema: Forensic Discovery, Addison-Wesley, 2005
  • Presentation material and selected academic papers