Course Title: Computer and Internet Forensics

Part A: Course Overview

Course Title: Computer and Internet Forensics

Credit Points: 12.00

Terms

Course Code

Campus

Career

School

Learning Mode

Teaching Period(s)

COSC3135

City Campus

Postgraduate

175H Computing Technologies

Face-to-Face

 Sem 2 2025

Course Coordinator: Mohammad Saidur Rahman

Course Coordinator Phone: +61 (449) 787067

Course Coordinator Email: mohammadsaidur.rahman@rmit.edu.au

Course Coordinator Location: City Campus

Course Coordinator Availability: by appointment


Pre-requisite Courses and Assumed Knowledge and Capabilities

Enforced Pre-Requisite Courses

Successful completion of the following course/s:

If you have completed prior studies at RMIT or another institution that developed the skills and knowledge covered in the above course/s you may be eligible to apply for credit transfer.

Alternatively, if you have prior relevant work experience that developed the skills and knowledge covered in the above course/s you may be eligible for recognition of prior learning.

Please follow the link for further information on how to apply for credit for prior study or experience.


Course Description

Cybercrime universally causes harm to individuals, SMEs, primes, critical infrastructure systems, and governments. As we live in the Internet era, devices connected to the Internet can be exposed to cyber threats. Cyber assurance is vital for business continuity, and security of our business processes, supply chain systems, and data systems.

The role of computer and internet forensics in cybersecurity is to identify, preserve, analyse, and present digital evidence in a manner that is legally admissible. It helps in detecting and responding to cyber threats and attacks by uncovering the methods and extent of breaches, thereby aiding in the prosecution of cybercriminals. Additionally, computer and internet forensics provides critical insights that inform the development of stronger security measures, contributing to the overall protection of digital assets and systems.

This course is designed to provide a comprehensive introduction to the field of digital forensics, focusing on the investigation and analysis of digital devices and internet-based activities.


Objectives/Learning Outcomes/Capability Development

Program Learning Outcomes

This course is an option course so it is not required to contribute to the development of program learning outcomes (PLOs) though it may assist your achievement of several PLOs.

For more information on the program learning outcomes for your program, please see the program guide.


Upon successful completion of this course, you will be able to:

  1. Exhibit a deep understand of the principles and practices of computer and internet forensics, including the methods used to investigate and analyse digital evidence.
  2. Critically evaluate and apply appropriate forensic tools and techniques to recover, preserve, and examine data from various digital devices.
  3. Appraise digital evidence to reconstruct events, identify perpetrators, and understand the context of cyber incidents.
  4. Critically review the legal and ethical considerations involved in digital forensic investigations, ensuring compliance with relevant laws and regulations.
  5. Interpret forensic findings effectively through clear, concise, and professional reports and presentations, suitable for both technical and non-technical audiences.
  6. Educate stakeholders about threats, possible mitigation approaches, and report actions taken in response to incidents.


Overview of Learning Activities

This course is delivered in on-campus mode but aims to provide multiple modes of delivery with course materials available electronically wherever possible. Each topic (in standard on-campus mode) consists of lectures and workshops.

The learning activities included in this course are:

  • Lectures where key concepts will be explained, course material will be presented, and the subject matter will be illustrated with demonstrations and examples.
  • Workshops will focus on practical work, problem-solving, and the exploration of concepts with teaching staff and other students.
  • Group discussions (including in-class and online forums) with teaching staff and other students will focus on solving problems related to lecture examples, workshop tasks, and exploration of advanced relevant concepts.
  • Assignment work will require an integrated understanding of the subject matter; and private study, working through the course as presented in classes and learning materials, and gaining practice at solving conceptual and technical problems.

You are encouraged to be proactive and self-directed in your learning, asking questions of your lecturer and/or peers and seeking out information as required, especially from the numerous sources available through the RMIT library, and through links and material specific to this course that is available through myRMIT Studies Course.


Overview of Learning Resources

You will make use of computer laboratories and relevant software recommended by the School. You will be able to access course information and learning materials through myRMIT and may be provided with additional materials. Lists of relevant reference texts, resources in the library and freely accessible Internet sites will be provided.

Use the RMIT Bookshop textbook list search page to find recommended textbook(s).

There are services available to support your learning through the University Library. The Library provides guides on academic referencing and subject specialist help as well as a range of study support services. These services can provide extra support to organise your studies, assignment planning or learning skills advice you may wish to contact the Study and Learning Centre. http://www.rmit.edu.au/studyandlearningcentre

For further information, please visit the Library page on the RMIT University website and the myRMIT student portal

BYOD requirement

Since this course is interactive, you will need to bring along a personal laptop to class that is powerful enough to handle the software used. See below for the minimum useful specifications:

  • Recent MS Windows OS 10 or higher with native ability to virtualize with VirtualBox software (free), or MacOS with ability to virtualise.
  • 8GB of RAM minimum, 16GB preferred
  • USB memory stick capability
  • Ability to virtual-boot off USB memory stick is desirable
  • 100GB free space on hard disk for the various software and virtual instances
  • Reasonably powerful CPU, else everybody will be waiting for you.

Most recent laptops will have the above characteristics


Overview of Assessment

Note: This course has no hurdle requirements.

Assessment tasks

Assessment Task 1: Industry focused Timed Assignment 1
Weighting 30%
This assessment task supports CLOs 1 - 3

Assessment Task 2: Industry focused Timed Assignment 2
Weighting 50%
This assessment task supports CLOs 3 – 6

Assessment Task 3: Lab exam
Weighting 20%
This assessment supports CLOs 1 - 6


If you have a long-term medical condition and/or disability it may be possible to negotiate to vary aspects of the learning or assessment methods. You can contact the program coordinator or Equitable Learning Services if you would like to find out more.