Vorlesung IT-Forensics

This lecture will be taught in English. The lecture will be held in a hybrid format.

Thursdays, 10-12 h (c.t.) , in E1.3, HS 001

Tutorial: Thursdays, 16-18 h (c.t.), in E1.3, SR 014

Main exam: 26.07.23, 2 pm - 4 pm in E2.2, Günter-Hotz-HS and E1.3, HS 002

Mid-term exam: June, 15, 4 pm – 6 pm in E2.2, Günter-Hotz-HS

Re-exam: 25.09.23, 2 pm - 4 pm in E2.2, Günter-Hotz-HS

The lecture deals with finding and evaluating legal evidence in IT systems, both for criminal prosecution and civil action.

Focus areas include, among others:

Processes of IT forensics (with a focus on incident response)

Analysis of storage media and file systems

Retrieval and analysis of RAM contents (e.g., cold boot attacks)

Attacks on passwords

(Basics of) evidence in civial actions and criminal proceedings

Role of technical experts in court

CMS