CE718-7-AU-CO:
Computer Forensics
2025/26
Computer Science and Electronic Engineering (School of)
Colchester Campus
Autumn
Postgraduate: Level 7
Current
Thursday 02 October 2025
Friday 12 December 2025
15
07 April 2025
Requisites for this module
(none)
(none)
(none)
(none)
(none)
MSC G41912 Cyber Security
The module covers the fundamentals of computer forensics, including an understanding of relevant legislation and legal constraints. It addresses the requirements for evidence collection, methods for intrusion detection, response and management of intrusions, incident handling, as well as intrusion analysis, monitoring, and logging.
The aims of this module are:
- To provide a robust understanding of current digital forensic and watermarking technologies with an additional focus on the legal requirements for evidence gathering, clearly emphasising the abilities and limitations of the techniques.
By the end of this module, students will be expected to be able to:
- Analyse the principles of digital forensics.
- Evaluate the legal foundations for evidence gathering.
- Assess the limitations of forensic techniques.
- Appraise the role of role of digital steganography and watermarking.
Outline Syllabus:
- Evidence gathering rules and techniques
- Collecting, processing, and preserving digital evidence
- Device forensics
- Memory forensics
- Network forensics
- Anti-forensic techniques
- Forensic report writing and expert testimony
- Digital steganography and watermarking
- The growing role of digital steganography and watermarking in modern malware
This module will be delivered via:
- Two 1-hour lectures per week (10 weeks)
- One 2-hour laboratory per week (10 weeks)
- Two 1-hour revision lectures in Summer Term
Inclusivity is ensured in the following ways: lecturers and other teachers are informed at the start of the term about students with special needs; student voice groups allow representatives to discuss issues surrounding learning for minorities.
This module does not appear to have a published bibliography for this year.
Assessment items, weightings and deadlines
| Coursework / exam |
Description |
Deadline |
Coursework weighting |
| Coursework |
Mock Digital Forensic Investigation |
|
100% |
| Exam |
Main exam: In-Person, Open Book (Restricted), 120 minutes during Early Exams
|
| Exam |
Reassessment Main exam: In-Person, Open Book (Restricted), 120 minutes during September (Reassessment Period)
|
Additional coursework information
10 weekly workshops delivered during the laboratory sessions will provide practical skills on the concepts introduced. Opportunities to sit practice papers/questions will also be provided.
Exam format definitions
- Remote, open book: Your exam will take place remotely via an online learning platform. You may refer to any physical or electronic materials during the exam.
- In-person, open book: Your exam will take place on campus under invigilation. You may refer to any physical materials such as paper study notes or a textbook during the exam. Electronic devices may not be used in the exam.
- In-person, open book (restricted): The exam will take place on campus under invigilation. You may refer only to specific physical materials such as a named textbook during the exam. Permitted materials will be specified by your department. Electronic devices may not be used in the exam.
- In-person, closed book: The exam will take place on campus under invigilation. You may not refer to any physical materials or electronic devices during the exam. There may be times when a paper dictionary,
for example, may be permitted in an otherwise closed book exam. Any exceptions will be specified by your department.
Your department will provide further guidance before your exams.
Overall assessment
Reassessment
Module supervisor and teaching staff
No
No
No
No external examiner information available for this module.
Available via Moodle
No lecture recording information available for this module.
* Please note: due to differing publication schedules, items marked with an asterisk (*) base their information upon the previous academic year.
Disclaimer: The University makes every effort to ensure that this information on its Module Directory is accurate and up-to-date. Exceptionally it can
be necessary to make changes, for example to programmes, modules, facilities or fees. Examples of such reasons might include a change of law or regulatory requirements,
industrial action, lack of demand, departure of key personnel, change in government policy, or withdrawal/reduction of funding. Changes to modules may for example consist
of variations to the content and method of delivery or assessment of modules and other services, to discontinue modules and other services and to merge or combine modules.
The University will endeavour to keep such changes to a minimum, and will also keep students informed appropriately by updating our programme specifications and module directory.
The full Procedures, Rules and Regulations of the University governing how it operates are set out in the Charter, Statutes and Ordinances and in the University Regulations, Policy and Procedures.