ITC597 Digital Forensics (8)


This subject provides an in-depth study of the rapidly changing and fascinating field of computer forensics. It combines both the technical expertise and the knowledge required to investigate, detect and prevent digital crimes. The subject covers the knowledge on digital forensics legislations, digital crime, forensics processes and procedures, data acquisition and validation, e-discovery tools, e-evidence collection and preservation, investigating operating systems and file systems, network forensics, art of steganography and mobile device forensics, email and web forensics, presenting reports and testimony as an expert witness.

+ Subject Availability Modes and Location

Session 1
InternalCSU Study Centre Melbourne
InternalCSU Study Centre Sydney
DistanceWagga Wagga Campus
Continuing students should consult the SAL for current offering details: ITC597
Where differences exist between the Handbook and the SAL, the SAL should be taken as containing the correct subject offering details.

Subject information

Duration Grading System School:
One sessionHD/FLSchool of Computing and Mathematics

Enrolment restrictions

Not available to students who have completed ITC523. Only available to students enrolled in: Master of Networking and System Administration
Master of Information Systems Security
Master of Information Technology
Incompatible subject(s)Related subject(s)
ITC523 ITC523 Paired Subject

Learning Outcomes

Upon successful completion of this subject, students should:
  • be able to determine and explain the legal and ethical considerations for investigating and prosecuting digital crimes;
  • be able to formulate a digital forensics process;
  • be able to evaluate the technology in digital forensics to detect, prevent and recover from digital crimes;
  • be able to analyse data on storage media and various file systems;
  • be able to collect electronic evidence without compromising the original data;
  • be able to evaluate the functions and features of digital forensics equipment, the environment and the tools for a digital forensics lab;
  • be able to critique and compose technical tactics in digital crimes and assess the steps involved in a digital forensics investigation;
  • be able to prepare and defend reports on the results of an investigation.


The subject will cover the following topics:
  • Relevant legislation and codes of ethics
  • Digital crime, civil and criminal law
  • Computer forensics and the digital detective
  • Forensic processes, policies and procedures
  • Fraud and forensic accounting
  • E-Discovery, guidelines and standards
  • E-Evidence, tools, environments and equipment
  • Systems basics and file systems
  • Investigating operating systems
  • Email and web forensics
  • Network forensics and intrusion detection
  • Reporting and presenting


The information contained in the 2016 CSU Handbook was accurate at the date of publication: 06 September 2016. The University reserves the right to vary the information at any time without notice.