KV5041 - Digital Forensics Incident Response

What will I learn on this module?

This module provides a broad and practical introduction to the fundamentals of digital security and forensics. The module will foster your skills in problem solving by applying investigative skills within the strict boundaries of the law and in keeping with ethical and professional codes of practice. Increasingly, employers are looking for network and cybersecurity professionals who understand how digital forensics can support the response to cybersecurity incidents, an area of digital forensics known as digital forensics incident response (DFIR). This module will provide you with the knowledge and skills to understand this area of cyber security.

The theoretical material on digital security and forensics will be re-enforced through the analysis and discussion of case studies in seminar sessions as well as sessions on the use of security and digital forensics tools in the analysis of chosen case studies in lab-based practical sessions.

You will develop analytical and evaluative skills in the appropriate use of industry software for solving problems in a variety of DFIR environments and problem situations. The ethical responsibilities of studying digital security and forensics and the need to address personal and professional integrity will be included in the module.

You will also critically engage with research outputs as part of your research-rich learning. The main element in assessment (100%) will be a written report that will bring together all your new skills and techniques.

How will I learn on this module?

You will learn through lectures, interactive labs, and independent learning. Lectures are the main vehicle for introducing fundamental concepts and principles and for providing context and motivation. You will be expected to prepare for lecture topics and deepen your understanding of course material by studying appropriate literature. Interactive lab sessions are a key element in providing you with opportunities to identify, apply and evaluate appropriate techniques. This approach is exemplified in this module by its requirements for you to demonstrate an understanding of theoretical concepts and an ability to adopt a more critical and reflective approach based on a broader understanding of digital security and forensic challenges and their solutions.

How will I be supported academically on this module?

During your lab classes, academic support will be available to you to guide you through the exercises, with a strong focus on practical work in Northumbria’s CIS building computer labs, which are fully equipped with the latest industry-standard software.

The University’s eLearning Portal offers access to all lecture and seminar materials to reinforce your learning. In addition, the university library offers support for all students through providing electronic resources.

What will I be expected to read on this module?

All modules at Northumbria include a range of reading materials that students are expected to engage with. Online reading lists (provided after enrolment) give you access to your reading material for your modules. The Library works in partnership with your module tutors to ensure you have access to the material that you need.

What will I be expected to achieve?

Knowledge & Understanding:
ML01 – Acquire an in-depth understanding of the current digital security landscape.
ML02 - Identify and apply appropriate digital forensic processes and procedures.
ML03 – Evaluate the core concepts, knowledge and practice of digital security and forensics that have developed through research

Intellectual / Professional skills & abilities:
ML04 – Identify and evaluate findings obtained from digital security or forensics investigations and apply appropriate legal and procedural principles.

Personal Values Attributes (Global / Cultural awareness, Ethics, Curiosity) (PVA):
ML05 – Communicate and present written findings in such ways that they meet the required standards

How will I be assessed?

The main element of summative assessment (100%) will be a final assignment that brings together all your new skills and techniques. You will investigate a mock case study culminating in the production of a written report. The word limit will be 3500 words.
You will receive both informative and confirmatory feedback on your assessments.
This assessment addresses all Module Learning Outcomes. On an on-going basis you will also receive formative feedback on in-class exercises you are required to complete.

Pre-requisite(s)

NA

Co-requisite(s)

NA

Module abstract

This module will provide you with the skills and knowledge to forensically respond to cybersecurity incidents. You will analyse and examine digital security and forensic case studies using the latest industry specialist software, giving invaluable hands-on practical use. You will be given rounded information on the principles and practice of digital security and forensics from theoretical and technical perspectives. You will be encouraged to analyse academic articles, discuss the current state of knowledge, and identify further questions to be addressed. The theoretical material on digital security and forensics will be re-enforced through the analysis and discussion of case studies in seminar sessions as well as sessions on the use of security and digital forensics tools in the analysis of chosen case studies in lab-based practical sessions. You will develop analytical and evaluative skills in the appropriate use of industry software for solving problems in a variety of environments and problem situations. The ethical responsibilities of studying digital security and forensics and the need to address personal and professional integrity will be included in the module.

Course info

UCAS Code G415

Credits 20

Level of Study Undergraduate

Mode of Study 3 years Full Time or 4 years with a placement (sandwich)/study abroad

Department Computer and Information Sciences

Location City Campus, Northumbria University

City Newcastle

Start September 2025

Fee Information

Module Information

All information is accurate at the time of sharing. 

Full time Courses are primarily delivered via on-campus face to face learning but could include elements of online learning. Most courses run as planned and as promoted on our website and via our marketing materials, but if there are any substantial changes (as determined by the Competition and Markets Authority) to a course or there is the potential that course may be withdrawn, we will notify all affected applicants as soon as possible with advice and guidance regarding their options. It is also important to be aware that optional modules listed on course pages may be subject to change depending on uptake numbers each year.  

Contact time is subject to increase or decrease in line with possible restrictions imposed by the government or the University in the interest of maintaining the health and safety and wellbeing of students, staff, and visitors if this is deemed necessary in future.

 

Useful Links

Find out about our distinctive approach at 
www.northumbria.ac.uk/exp

Admissions Terms and Conditions
northumbria.ac.uk/terms

Fees and Funding
northumbria.ac.uk/fees

Admissions Policy
northumbria.ac.uk/adpolicy

Admissions Complaints Policy
northumbria.ac.uk/complaints