COMP41430 Linux for Investigators

Academic Year 2023/2024

This course aims to show you the power and utility of the Linux operating system in conducting forensic investigations. Much of the course is devoted to demonstration of Linux forensics analysis techniques via investigation case studies.

Show/hide contentOpenClose All

Curricular information is subject to change

Learning Outcomes:

Upon successful completion of this module students should be able to:

• Install the Linux Operating System
• Navigate the Linux File System
• Utilise standard Linux tools for digital forensics
• Acquire images of electronic storage devices in a forensically sound manner
• Analyse file systems using Linux tools
• Perform data carving using Linux tools
• Gather information on running Linux systems

Student Effort Hours: 
Student Effort Type Hours
Lectures

24

Practical

20

Autonomous Student Learning

156

Total

200

Approaches to Teaching and Learning:
active/task-based learning; lectures; critical writing; reflective learning; lab work; problem-based learning; case-based learning;
 
Requirements, Exclusions and Recommendations
Learning Requirements:

In order to take this module you must be a serving member of a law enforcement organisation.


Module Requisites and Incompatibles
Not applicable to this module.
 
Assessment Strategy  
Description Timing Open Book Exam Component Scale Must Pass Component % of Final Grade
Continuous Assessment: Continuous Assessment Varies over the Trimester n/a Graded No

40

Examination: 2 hour End of Trimester Exam 2 hour End of Trimester Exam No Graded No

60


Carry forward of passed components
No
 
Resit In Terminal Exam
Summer Yes - 2 Hour
Please see Student Jargon Buster for more information about remediation types and timing. 
Feedback Strategy/Strategies

• Feedback individually to students, post-assessment

How will my Feedback be Delivered?

Not yet recorded.

Timetabling information is displayed only for guidance purposes, relates to the current Academic Year only and is subject to change.
 

There are no rows to display