ITE513 Forensic Investigation (8)

In this subject students will acquire an understanding of the principles of forensic investigation and the complexities involved in conducting forensic investigations in a contemporary context. Students will develop a deeper understanding of the methods for acquiring digital evidence from more contemporary, non-traditional, digital systems (such as social media sites, virtualised systems and multimedia platforms) using practical examples, case studies and activities. Students will also learn principles of investigating malware and ransomware attacks and solve the potential difficulties in these contexts.


Session 2 (60)
Wagga Wagga Campus

Continuing students should consult the SAL for current offering details: ITE513. Where differences exist between the Handbook and the SAL, the SAL should be taken as containing the correct subject offering details.

Subject Information

Grading System



One session


School of Computing, Mathematics and Engineering

Enrolment Restrictions

Only available to students enrolled in IT Masters relevant courses.

Assumed Knowledge


Learning Outcomes

Upon successful completion of this subject, students should:
  • be able to examine the role and importance of digital forensics;
  • be able to differentiate the role of the computer forensics investigator in different contexts;
  • be able to assemble and secure evidence from a range of evidence locations in a forensically sound manner;
  • be able to investigate malware and ransomware attacks;
  • be able to solve potential difficulties in investigating non-traditional systems; and
  • be able to evaluate differences in the forensic process depending on context.


This subject will cover the following topics:
  • Computer forensics
  • File System Forensic Analysis Part 1 - Volumes and FAT
  • File System Forensic Analysis Part 2 - NTFS
  • File Carving.
  • Acquiring digital evidence
  • Log file analysis
  • Mobile device forensics (Android/GPS/SIM Cards)
  • Malware analysis
  • Ransomware analysis
  • Image forgery
  • Steganography & Steganalysis

Indicative Assessment

The following table summarises the assessment tasks for the online offering of ITE513 in Session 2 2021. Please note this is a guide only. Assessment tasks are regularly updated and can also differ to suit the mode of study (online or on campus).

Item Number
Value %
Reconnaissance & preparation tools
File carving practical task
Desktop forensic investigation report
Final exam

The information contained in the CSU Handbook was accurate at the date of publication: March 2022. The University reserves the right to vary the information at any time without notice.