The course will cover the following topics:
Bringing science to digital forensics: from the Daubert Standard to the Federal Rules of Evidence. Digital Evidence in EU and Italy. The 2009 NSF Report and its effects on Digital Forensics.
The ISO-IEC 27037 Standard (Guidelines for Identification, Collection, Acquisition and Preservation of Digital Evidence) and the Council of Europe Electronic Evidence Guidelines (COE-EEG)
The basics of digital forensics: identifying, preserving and collecting evidence. Online (live) and offline (post-mortem) analysis. File system and log analysis.
Advanced topics: Timeline analysis. Analysis of georeferenced data. Mobile forensics. Cloud forensics. Multimedia forensics. Email and communication system forensics.
Presenting digital evidence to trial courts. Data visualization techniques for digital forensics data. The course will also provide hindsight on how forensic software tools are built and how to proficiently use them to process digital evidences.