Course Outline

SEC704 Digital Crime Scene Management

Course Coordinator:Graeme Edwards (gedwards@usc.edu.au) School:School of Science, Technology and Engineering

2021Semester 2

Online

Online You can do this course without coming onto campus.

Please go to the USC website for up to date information on the
teaching sessions and campuses where this course is usually offered.

What is this course about?

Description

In this online course, you will learn the legal and organisational requirements of managing a digital crime
scene including evidence identification, preservation and seizure, as well as the general management and
preservation of the digital crime scene. You will learn about the volatility of digital evidence and how to
manage it to preserve its integrity and prove its authenticity. You will also learn the way digital evidence is
used to progress an investigation into a cyber breach and how the digital investigator contributes in a multidisciplinary investigation team. The course will analyse the forms of digital evidence you will find in your
investigations and introduce evolving technology of specific relevance to the digital investigator including
cloud computing and the Internet of Things.

How will this course be delivered?

Activity Hours Beginning Week Frequency
Online
Online – In addition to online library resources, teaching notes are made available online and a weekly online tutorial class is delivered synchronously via video conferencing. 12hrs Not applicable Not Yet Determined

Course Topics

Introduction to cybercriminals, motives, and methods

Digital evidence

Crime scene and evidence management

Investigating cybercrime types

Civil legislation relating to cybercrime investigation

Investiugating the cloud environment

 

What level is this course?

700 Level (Specialised)

Demonstrating a specialised body of knowledge and set of skills for professional practice or further learning. Advanced application of knowledge and skills in unfamiliar contexts.

What is the unit value of this course?

12 units

How does this course contribute to my learning?

Course Learning Outcomes On successful completion of this course, you should be able to... Graduate Qualities Completing these tasks successfully will contribute to you becoming...
1 Identify the different forms of cybercriminal, their motivations and skillsets. Knowledgeable
2 Analyse and discuss the methodologies used in managing a digital crime scene including preparation of an investigation plan. Knowledgeable
Creative and critical thinker
3 Analyse and discuss the many forms of digital evidence available and their relevance to a digital investigation. Creative and critical thinker
Ethical
4 Demonstrate the requirements of competently handling digital evidence. Empowered
5 Interrogate digital evidence to identify its value to an investigation Creative and critical thinker
6 Understand and apply legal options available to the civil investigator Knowledgeable
Empowered
7 Identify and explain the different legal considerations an investigator must understand when planning and commencing a digital crime scene examination including evidence preservation and capture as well as preserving the chain of custody. Knowledgeable
Ethical
8 Demonstrate effective collaboration within a team Empowered
9 Communicate the outcomes of your inquiries to non-technical audiences such as senior managers. Engaged

Am I eligible to enrol in this course?

Refer to the USC Glossary of terms for definitions of “pre-requisites, co-requisites and anti-requisites”.

Pre-requisites

Enrolled in Program SC510, SC517 or SC704

Co-requisites

Not applicable

Anti-requisites

Not applicable

Specific assumed prior knowledge and skills (where applicable)

Students will be assumed to have an understanding of technology and its role in society. They will be expected to have a working knowledge of computer systems and networks.

How am I going to be assessed?

Grading Scale

Standard Grading (GRD)

High Distinction (HD), Distinction (DN), Credit (CR), Pass (PS), Fail (FL).

Details of early feedback on progress

Students will participate in continuous peer and self-assessment during tutorials. Students will also receive feedback during the case study working groups.

Assessment tasks

Delivery mode Task No. Assessment Product Individual or Group Weighting % What is the duration / length? When should I submit? Where should I submit it?
All 1 Case Study Individual 25%
2000 words
Week 6 Online Assignment Submission with plagiarism check
All 2 Report Group 25%
2500 words
Week 10 Online Assignment Submission with plagiarism check
All 3 Case Study Individual 50%
3000 words equivalent
Exam Period Online Assignment Submission with plagiarism check
All - Assessment Task 1:Digital evidence case study
Goal:
From a given case study, identify the different forms of physical and technical evidence that may be expected to be located in a cybercrime scene. Analyse the evidence and discuss how each may be used to advance your investigation and provide evidence as to the identity of the cybercriminal and their motivations.
Product: Case Study
Format:
The product to be presented is a 2,000-word analysis of the identified digital crime scenes and an explanation of the value of the physical and digital evidence that may be located within it. You will 

• Research and discuss what constitutes a digital crime scene.
• Identify and discuss the forms of digital evidence located within and from the digital crime scene.
• Explain the potential for identifying a suspect from the evidence collected.
• Communication of research using academic writing conventions.
• Identify a potential motivation for the crime from the evidence provided and your analysis.
Criteria:
No. Learning Outcome assessed
1
Discussion of a crime scene
2
2
Identification and discussion on forms of evidence
3 4
3
Explanation of suspect identification
1
4
Professional communication
9
All - Assessment Task 2:Investigation plan
Goal:
Identify and describe the logistical requirements for attending to a digital crime scene including the necessity to ensure evidence preservation. You will also discuss the volatility of evidence you may locate and demonstrate the professional relationship between yourself as an investigator and the digital forensic officer. You will present a report explaining your reasoning including safety provisions.
Product: Report
Format:
2,500-word group report - details on Blackboard.
Criteria:
No. Learning Outcome assessed
1
Demonstration of leadership qualities (in an online environment) and collaborating with a team
8
2
Analysis of the crime scene, including digital and physical
2 7
3
Application of ‘chain of evidence protection’
5 7
4
Communication of research
9
All - Assessment Task 3:Digital crime scene presentation
Goal:
Show an ability to prepare and provide a presentation to a legal practitioner and senior executive reporting on a digital crime scene examination where the content shows the scene examination, legality of actions, preservation of evidence and the correlation of evidence located. You will explain the evidence seized and the relevance to the investigation, as well as identifying new lines of inquiry. You will produce the investigation plan you have prepared to show your actions, and these will relate to your examination and plans for future inquiries.
Product: Case Study
Format:
The product to be presented is a video recorded presentation to a legal practitioner detailing the circumstances and activity within a digital crime scene using material from a provided case study.
Criteria:
No. Learning Outcome assessed
1
Application of methodology
2
2
Application of the rules of evidence
3 6
3
Conclusions supported by evidence
7
4
Professional communication of research
9

Directed study hours

A 12-unit course will have total of 150 learning hours which will include directed study hours (including online if required), self-directed learning and completion of assessable tasks. Directed study hours may vary by location. Student workload is calculated at 12.5 learning hours per one unit.

What resources do I need to undertake this course?

Please note: Course information, including specific information of recommended readings, learning activities, resources, weekly readings, etc. are available on the course Canvas site– Please log in as soon as possible.

Prescribed text(s) or course reader

There are no required/recommended resources for this course.

Specific requirements

This is an online course therefore access to a computer and the internet for 10-12 hours per week is essential.

How are risks managed in this course?

Health and safety risks for this course have been assessed as low. It is your responsibility to review course material, search online, discuss with lecturers and peers and understand the health and safety risks associated with your specific course of study and to familiarise yourself with the University’s general health and safety principles by reviewing the online induction training for students, and following the instructions of the University staff.

What administrative information is relevant to this course?

Assessment: Academic Integrity

Academic integrity is the ethical standard of university participation.  It ensures that students graduate as a result of proving they are competent in their discipline.  This is integral in maintaining the value of academic qualifications. Each industry has expectations and standards of the skills and knowledge within that discipline and these are reflected in assessment.

Academic integrity means that you do not engage in any activity that is considered to be academic fraud; including plagiarism, collusion or outsourcing any part of any assessment item to any other person.  You are expected to be honest and ethical by completing all work yourself and indicating in your work which ideas and information were developed by you and which were taken from others. You cannot provide your assessment work to others. You are also expected to provide evidence of wide and critical reading, usually by using appropriate academic references.

In order to minimise incidents of academic fraud, this course may require that some of its assessment tasks, when submitted to Canvas, are electronically checked through Turnitin.  This software allows for text comparisons to be made between your submitted assessment item and all other work to which Turnitin has access.

Assessment: Additional Requirements

Your eligibility for supplementary assessment in a course is dependent of the following conditions applying:

The final mark is in the percentage range 47% to 49.4%
The course is graded using the Standard Grading scale
You have not failed an assessment task in the course due to academic misconduct.

Assessment: Submission penalties

Late submission of assessment tasks may be penalised at the following maximum rate: 
- 5% (of the assessment task's identified value) per day for the first two days from the date identified as the due date for the assessment task. 
- 10% (of the assessment task's identified value) for the third day - 20% (of the assessment task's identified value) for the fourth day and subsequent days up to and including seven days from the date identified as the due date for the assessment task. 
- A result of zero is awarded for an assessment task submitted after seven days from the date identified as the due date for the assessment task. Weekdays and weekends are included in the calculation of days late. To request an extension you must contact your course coordinator to negotiate an outcome.

SafeUSC

USC is committed to a culture of respect and providing a safe and supportive environment for all members of our community. For immediate assistance on campus contact SafeUSC by phone: 07 5430 1168 or using the SafeZone app. For general enquires contact the SafeUSC team by phone 07 5456 3864 or email safe@usc.edu.au.

The SafeUSC Specialist Service is a Student Wellbeing service that provides free and confidential support to students who may have experienced or observed behaviour that could cause fear, offence or trauma. To contact the service call 07 5430 1226 or email studentwellbeing@usc.edu.au.

Study help

For help with course-specific advice, for example what information to include in your assessment, you should first contact your tutor, then your course coordinator, if needed.

If you require additional assistance, the Learning Advisers are trained professionals who are ready to help you develop a wide range of academic skills. Visit the Learning Advisers web page for more information, or contact Student Central for further assistance: +61 7 5430 2890 or studentcentral@usc.edu.au.

Wellbeing Services

Student Wellbeing provide free and confidential counselling on a wide range of personal, academic, social and psychological matters, to foster positive mental health and wellbeing for your academic success.

To book a confidential appointment go to Student Hub, email studentwellbeing@usc.edu.au or call 07 5430 1226.

AccessAbility Services

Ability Advisers ensure equal access to all aspects of university life. If your studies are affected by a disability, learning disorder mental health issue, injury or illness, or you are a primary carer for someone with a disability or who is considered frail and aged, AccessAbility Services can provide access to appropriate reasonable adjustments and practical advice about the support and facilities available to you throughout the University.

To book a confidential appointment go to Student Hub, email AccessAbility@usc.edu.au or call 07 5430 2890.

Links to relevant University policy and procedures

For more information on Academic Learning & Teaching categories including:

  • Assessment: Courses and Coursework Programs
  • Review of Assessment and Final Grades
  • Supplementary Assessment
  • Administration of Central Examinations
  • Deferred Examinations
  • Student Academic Misconduct
  • Students with a Disability

Visit the USC website: https://www.usc.edu.au/explore/policies-and-procedures#academic-learning-and-teaching

Student Charter

USC is committed to excellence in teaching, research and engagement in an environment that is inclusive, inspiring, safe and respectful. The Student Charter sets out what students can expect from the University, and what in turn is expected of students, to achieve these outcomes.

General Enquiries

  • In person:
    • USC Sunshine Coast - Student Central, Ground Floor, Building C, 90 Sippy Downs Drive, Sippy Downs
    • USC Moreton Bay - Service Centre, Ground Floor, Foundation Building, Gympie Road, Petrie
    • USC SouthBank - Student Central, Building A4 (SW1), 52 Merivale Street, South Brisbane
    • USC Gympie - Student Central, 71 Cartwright Road, Gympie
    • USC Fraser Coast - Student Central, Student Central, Building A, 161 Old Maryborough Rd, Hervey Bay
    • USC Caboolture - Student Central, Level 1 Building J, Cnr Manley and Tallon Street, Caboolture
  • Tel:+61 7 5430 2890
  • Email:studentcentral@usc.edu.au