Live Data Forensics (COMP41660)
Credits 10 Subject Computer Science
Level 4 School Computer Science
Semester   Information Autumn Module Coordinator Dr Mark Scanlon

Live Data Forensics is a term describing tools, techniques, and procedures for preservation and analysis of volatile evidence contained from a running computer. Traditional forensics involves seizing the machine and returning it to the lab environment for a forensic analysis. This can destroy information or make information inaccessible, such as RAM contents, Encrypted containers, cloud storage data, etc. Live Data Forensics involves examining the machine on the scene in order to preserve this volatile information. In the course, we also will research new technologies regarding live data forensics.

Curricular information is subject to change