Semester 3 / ECTS Credits: 5 ECTS

Course Description:

The main objective of this course is to give short and focused introduction to network forensics.

Students will gain comprehensive knowledge and practical skills of the topics covered with theories, concepts, and hands-on exercises.
Throughout this course participants will gain advanced knowledge of network topology and elements, computer network sources of evidence and the forensic analysis of network artefacts. Participants will learn about the underlying principles of computer networks and enhance their ability to conduct forensic examinations of data collected from computer networks including network devices, servers and hosts.

Practical skills will be obtained during lab work using Splunk and other network analysis tools by working on real-life scenarios.

Learning Outcomes:

  1. Examine the computer network for the existence of digital traces.
  2. Critically assess the tools for monitoring computer networks.
  3. Critically understand the authentication and authorization process.
  4. Formulate/shape the model of the topology of computer networks.
  5. Build reports on the conduct of digitally forensic investigation of computer networks.
  6. Combine the ISO OSI open system model.

Course content lectures:

  1. Network types, network technologies, devices
  2. Internet history, basics of www
  3. Open system ISO/OSI model
  4. Transmission Control Protocol/Internet Protocol
  5. Confidentiality, integrity and availability, authentication, authorization and availability
  6. SID, Firewall
  7. Intrusion into system, detection and prevention
  8. Domain name system, network protocols
  9. Online Tools for Analysis Log: Splunk
  10. Linux Network Traffic Analysis Tools
  11. Wireshark online analysis and analysis of packages
  12. Case studies
  13. Investigation reports