Vorlesung IT-Forensics
This lecture will be taught in English. The lecture will be held in a hybrid format.
Thursdays, 10-12 h (c.t.) , in E1.3, HS 001
Tutorial: Thursdays, 16-18 h (c.t.), in E1.3, SR 014
Main exam: 26.07.23, 2 pm - 4 pm in E2.2, Günter-Hotz-HS and E1.3, HS 002
Mid-term exam: June, 15, 4 pm – 6 pm in E2.2, Günter-Hotz-HS
Re-exam: 25.09.23, 2 pm - 4 pm in E2.2, Günter-Hotz-HS
The lecture deals with finding and evaluating legal evidence in IT systems, both for criminal prosecution and civil action.
Focus areas include, among others:
Processes of IT forensics (with a focus on incident response)
Analysis of storage media and file systems
Retrieval and analysis of RAM contents (e.g., cold boot attacks)
Attacks on passwords
(Basics of) evidence in civial actions and criminal proceedings
Role of technical experts in court