Faculty of Information Technology

Skip to content | Change text size

print version

Monash University Handbook 2011 Postgraduate - Unit

6 points, SCA Band 2, 0.125 EFTSL

Refer to the specific census and withdrawal dates for the semester(s) in which this unit is offered.

FacultyFaculty of Information Technology
OfferedNot offered in 2011


This unit provides students with a thorough grounding in the theory and application of computer forensic techniques. Topics covered will include: the role of computer forensics in computer crime detection and prosecution, legislative frameworks, phases of a computer forensic investigation, techniques involved in data recovery from volatile and non-volatile storage media, intrusion detection, computer forensic tools.


At the completion of this unit students will:

  • be conversant with the types of applications that benefit from computer forensic analysis;
  • appreciate the interrelationship between computer forensic techniques and the general principles behind rules of evidence;
  • understand the tasks involved in the acquisition, analysis and presentation phases of computer forensic investigations;
  • understand the methods involved in the recovery of data from various volatile and non-volatile storage media;
  • be able to develop and utilise audit trails and intrusion detection techniques;
  • be able to deploy open-source tools and analyse the results of such deployment in particular application contexts;
  • appreciate the various technical aspects of computer forensic investigations.


Assignments: 70%; Unit test: 30%

Contact hours

2 hrs lectures/wk, 2 hrs tutorials/wk


Recommended knowledge: computer architectures, principles of data communication and networks, experience with operating and file systems.

Additional information on this unit is available from the faculty at: