DATA ACQUISITION
Study guide number : 5000DA__15
SIS Description
: Data Acquisition
ECTS
:4
Course description
In this course the following topics are covered: Identification, Preservation and Collection van
potential evidence and their relation to Digital Forensic Investigations.
Language of Instruction
English.
Teaching Methods
Lectures, practical, consultancy and tutoring
Explanation: weekly lectures, practicals and tutoring sessions
Attendance at all of the above activities is mandatory.
Assessment methods
No
Study guide number
exam
Name
Appraisal
1
5015DA__TS
Written exam
Data Acquistion theory
40%
2
5015DA__OP
Assignment
Data Acquistion practical
60%
Explanation Assessment Methods
Online exam: 40% / assignments: 60%.
Lecturers
Carla Bombeld
Coordinator
Arnim Eijkhoudt
Material
* On-line via VlO (online learning environment)
* Presentations
* Assignments
Learning goals
Searching for and finding relevant sources with possible data traces that play a role in Digital
Forensic Investigations.
DATA ANALYSIS
Study guide number
SIS description
ECTS
: 5000DAN_15
: Data Analysis
:4
Course description
Data Analysis focuses on 'Puzzling with Evidence by Data Mining'. Topics like text-mining, E-mailmining and Social Network Analysis and their relation to Digital Forensic Investigations are covered.
Language of Instruction
English.
Teaching Methods
Lectures, consultancy and tutoring
Explanation: weekly lectures and tutoring sessions
Attendance at all of the above activities is mandatory.
Assessment methods
N0
Studyguide number
Assessment method
Name
Appraisal
1
5015DAN_TS
Written exam
Data Analysis theory
40%
2
5015DAN_OP
assignment
Data Analysis practical
60%
Explanation Assessment Methods
Online exam: 40% / assignments: 60%.
Lecturers
Carla Bombeld
Coordinator
David van Dijk
Material
* On-line via VlO (online learning environment)
* Presentations
* Assignments
Learning goals
The students learns how to find traces that play a role in Digital Forensic Investigations in data
sources.
DIGITAL FORENSIC INVESTIGATIONS PROJECT
Study guide number
SIS Description
ECTS
: 5000PDFI15
: Project DFI
: 11
Project Description
During the project students work on one or more DFI assignment for external clients.
Language of Instruction
English.
Teaching Methods
Project
Explanation Teaching Methods
Teams of students work on the DFI project. Each team consists of 2 to 6 students. Each team works
on various forensics projects for one or more clients, possibly on location.
Project teams are expected to follow the client’s commonly used methodology and



act professionally
draw up a plan of approach
report regularly
Teams will be assigned a senior consultant, who will advise on the approach and execution of the
project.
Weekly coaching and consulting sessions are organized. Attendance at these sessions is mandatory.
Assessment methods
No
Study guide number
Assessment method
Name
Appraisal
1
5015PDF1TM
Oral exam
Project DFI meth & techn
25%
2
5015PDF2PD
Product
Project DFI product
50%
3
5015PDF3TM
Oral exam
Project DFI process
25%
Explanation assessment methods
Product: assessed by the client (50%) Team contribution: assessed by the client and the project
lecturers 50%).
NOTE: - A detailed account of hours spent on the project and a reflective report are mandatory and
are taken into account in the final grading of the project.
Lecturers
Carla Bombeld
Coordinator
Arnim Eijkhoudt
Course material
N.A . Knowledge acquired in the other courses of the thematic semester are applied.
Learning goals
A student is able to do the following (both independently and as part of a team):
- draw up a plan of approach
- carry out an investigation
- draw up a functional and/or technical design
-design, build and/or implement an application or part of an infrastructure
- clearly communicate with clients and tutors.
INCIDENT INVESTIGATION
Study guide number: 5000II__15
SIS Description : Incident Investigation
ECTS: 4
Course description
Incident Investigation is focused on 'Finding out what incident happened and how the incident
happened' and the relation to Digital Forensic Investigations.
Language of Instruction
English.
Teaching Methods
Lectures, consultancy and tutoring
Explanation weekly lectures and tutoring sessions
Attendance at all of the above activities is mandatory.
Assessment methods
No
Study guide number
exam
Name
Appraisal
1
5015II__OP
Assignment
Incident Investigation paper
60%
2
5015II__TS
Written exam
Incident Investigation theory
40%
Explanation Assessment Methods
Written theory exam: 40% / assignments: 60%.
Lecturer and coordinator
Carla Bombeld
Material
* On-line via VlO (online learning environment)
* Presentations
* Assignments
Learning goals
The student learns how to investigate incidents that play a role in Digital Forensic Investigations, in a
methodical and structured way.
DIGITAL FORENSICS
Study guide number
SIS description
ECTS
: 5000DF__15
: Digital Forensics
:4
Language of Instruction
English.
Course description
Digital Forensics focuses on 'the processing of discovered potential evidence using automated tools'
and their relation to Digital Forensic Investigations.
Teaching Methods
Lectures, practical, consultancy and tutoring
No
Study guide no.
Assessment methods
Name
Appraisal
1
5015DF__TS
Written exam
Digital Forensics theory
100%
2
5015DF__OP
Assignment
Digital Forensics practical
pass.
Lecturer
Carla Bombeld
Learning goals
The student learns to search, find and process relevant digital traces that play a role in DFI, wih the help
of automated means