Kursuse eesmärk on anda mobiiltelefoni digitaalse ekspertiisi protseduuridesse süvavaade juriidilisest, telekommunikatsiooni ja arvutiteaduse aspektist. Kursuse läbinud üliõpilane on võimeline läbi viima seadusega kooskõlas mobiiltelefoni digitaalset ekspertiisi.

This course aims to provide a sound and complete immersion to the mobile phone forensics procedure from the point of view of the three main frameworks that intersect on this particular area: legal, telecommunications and computer science (i.e., digital forensics). The general objective of the course is to provide the student the capability of perform a lawful end-to-end mobile phone forensic investigation, from discovery/seizure, preservation, analysis to Court presentation.

Aine läbinud üliõpilane:
- saab aru mobiiltelefoni digitaalse ekspertiisi protseduuride eripäradest ja väljakutsetest;
- mõistab 2G, 3G ja 4G mobiilivõrkude tööpõhimõtteid, eriti mis puudutab digitaalse ekspertiisi jaoks olulisi omadusi, logisid ja muid salvestatud andmeid;
- tunneb digitaalsetele tõenditele esitatavaid juriidilisi nõudmisi Eesti õigusruumis;
- valib ja kasutab algtasemel mobiiltelefoni digitaalse ekspertiisi tehniliste aspektide jaoks sobivaid tööriistu;
- viib algtasemel läbi mobiilteelfoni digitaalset ekspertiisi;
- loob digitaalse ekspertiisi raporteid, mis sobivad esitamiseks Eesti kriminaaluurimise raames.

After completing this course the student:
- understands the particularities and challenges of the mobile phone forensics procedure;
- understands the system-level workings of 2G, 3G and 4G mobile networks, with particular emphasis on characteristics, logs and records of relevance to investigation;
- understands the legal expectations of forensic evidence and preparation of expert reports in compliance with the Estonian Code of Criminal Procedure;
- possesses basic competence to deal with the technical aspects of the mobile forensics investigations by selecting and using the appropriate tools;
- possesses basic competence to perform all the steps for a full and lawful mobile phone forensics investigation;
- generates expert forensic reports for presentation in Estonian criminal proceedings.

Kursuse raames tutvuvad üliõpilased mobiiltelefoni digitaalse ekspertiisi erinevate aspektidega ning viivad läbi praktilisi harjutusi teadmiste ja oskuste kinnistamiseks.

This course introduces students to the principles of Chain of Evidence and the process of mobile phone forensic analysis, both from legal and technical perspectives. It covers all the steps of the mobile forensics procedure from discovery/seizure through triage and securing at the crime scene, unlocking, imaging, thorough analysis and preparation of reports suitable for presentation in courts.

An eminently practical course that will prepare the student to deal with these devices forensically from three interconnected perspectives. First, the legal framework from where the forensics process arises, mainly criminal investigations, dealing with concepts encompassing the lawful forensics process to Court presentation. Second, the telecommunications framework where the mobile phone communication is carried out, covering relevant aspects such as the network data stored by the Mobile Network Carriage Service Providers and lawful call intercept. Lastly, the computer science framework, i.e. digital forensics, where the analysis of internal artifacts and relevant objects is performed. Relevant case objects may include phone logs, applications’ databases, files and other related records.

Students will use appropriate licensed data analysis tools to investigate phone contents and network records.

Due to sensitive content, it may be necessary to provide unclassified content to mainstream students; while cleared students may be able to access sensitive, protected content in some parts of the course.

-

Graded assessment. More details in the extended syllabus.

-

-

Via Moodle page

-