ITC597 Digital Forensics (8)

This subject provides an in-depth study of the rapidly changing and fascinating field of computer forensics. It combines both the technical expertise and the knowledge required to investigate, detect and prevent digital crimes. The subject covers the knowledge on digital forensics legislations, digital crime, forensics processes and procedures, data acquisition and validation, e-discovery tools, e-evidence collection and preservation, investigating operating systems and file systems, network forensics, art of steganography and mobile device forensics, email and web forensics, presenting reports and testimony as an expert witness.


Session 1 (30)
On Campus
CSU Study Centre Melbourne
CSU Study Centre Sydney
Port Macquarie Campus
Wagga Wagga Campus
Session 2 (60)
On Campus
CSU Study Centre Sydney

Continuing students should consult the SAL for current offering details: ITC597. Where differences exist between the Handbook and the SAL, the SAL should be taken as containing the correct subject offering details.

Subject Information

Grading System



One session


School of Computing and Mathematics

Enrolment Restrictions

Only available to postgraduate students. Not available to students who have completed ITC523.

Incompatible Subjects


Learning Outcomes

Upon successful completion of this subject, students should:
  • be able to determine and explain the legal and ethical considerations for investigating and prosecuting digital crimes;
  • be able to formulate a digital forensics process;
  • be able to evaluate the technology in digital forensics to detect, prevent and recover from digital crimes;
  • be able to analyse data on storage media and various file systems;
  • be able to collect electronic evidence without compromising the original data;
  • be able to evaluate the functions and features of digital forensics equipment, the environment and the tools for a digital forensics lab;
  • be able to critique and compose technical tactics in digital crimes and assess the steps involved in a digital forensics investigation;
  • be able to prepare and defend reports on the results of an investigation.


This subject will cover the following topics:
  • Relevant legislation and codes of ethics
  • Digital crime, civil and criminal law
  • Computer forensics and the digital detective
  • Forensic processes, policies and procedures
  • Fraud and forensic accounting
  • E-Discovery, guidelines and standards
  • E-Evidence, tools, environments and equipment
  • Systems basics and file systems
  • Investigating operating systems
  • Email and web forensics
  • Network forensics and intrusion detection
  • Reporting and presenting

Indicative Assessment

The following table summarises the assessment tasks for the online offering of ITC597 in Session 1 2019. Please note this is a guide only. Assessment tasks are regularly updated and can also differ to suit the mode of study (online or on campus).

Item Number
Value %
Assessment 1 - hands-on projects and quiz
Assessment 2 - tasks and research project
Assessment 3 - tasks and forensics report
Final exam

The information contained in the CSU Handbook was accurate at the date of publication: July 2020. The University reserves the right to vary the information at any time without notice.