Faculty of Information Technology

Skip to content | Change text size

print version

Monash University

Monash University Handbook 2010 Postgraduate - Unit

6 points, SCA Band 2, 0.125 EFTSL

FacultyFaculty of Information Technology
OfferedNot offered in 2010


This unit provides students with a thorough grounding in the theory and application of computer forensic techniques. Topics covered will include: the role of computer forensics in computer crime detection and prosecution, legislative frameworks, phases of a computer forensic investigation, techniques involved in data recovery from volatile and non-volatile storage media, intrusion detection, computer forensic tools.


At the completion of this unit students will:

  • be conversant with the types of applications that benefit from computer forensic analysis;
  • appreciate the interrelationship between computer forensic techniques and the general principles behind rules of evidence;
  • understand the tasks involved in the acquisition, analysis and presentation phases of computer forensic investigations;
  • understand the methods involved in the recovery of data from various volatile and non-volatile storage media;
  • be able to develop and utilise audit trails and intrusion detection techniques;
  • be able to deploy open-source tools and analyse the results of such deployment in particular application contexts;
  • appreciate the various technical aspects of computer forensic investigations.


Assignments: 70%; Unit test: 30%

Contact hours

2 hrs lectures/wk, 2 hrs tutorials/wk


Recommended knowledge: computer architectures, principles of data communication and networks, experience with operating and file systems.

Additional information on this unit is available from the faculty at: