Main Page

News

Time slots for re-exam inspection

Written on 04.10.23 by Leo Dessani

Hi all,

The re-exam inspection time slots have just been sent to those who registered. The assignment of the time slots was based on the order of registration. If you have registered but did not receive an email with a time slot, please write an email to leo.dessani@uni-saarland.de.

Please note:… Read more

Hi all,

Please note: Come only within your time slot and bring your student ID card with you!

As mentioned, the exam inspection will take place in the seminar room at the ground floor of the buildung C3.1 if you do not hear anything else from us.

Re-exam results and re-exam inspection

Written on 26.09.23 by Leo Dessani

We have finished grading the re-exam!

The results are visible in the CMS. For technical reasons, the grade "5.0" may be shown if you did not register for the re-exam, but are registered for the course in the CMS. Of course, we will only enter your grade into the LSF if you were actually… Read more

We have finished grading the re-exam!

We have done our best to ensure that we entered the points correctly, though mistakes cannot be completely excluded.

Overall, you could reach 90 points. The grade 1.0 was awarded from 67 points. The passing limit was 35 points. The grade average for those present in the re-exam was 3.56, the median grade 3.3.

The re-exam inspection will take place on October 6 starting at 11 am in one of the seminar rooms at the ground floor of the buildung C3.1 if you do not hear anything else from us. If you want to participate, write an email to leo.dessani@uni-saarland.de (subject: "Re-Exam inspection IT Forensics 2023") until October 3. You will then get your time slot. Please bring your student ID card with you.

Re-exam details

Written on 15.09.23 by Leo Dessani

Hi all,

With this email you will receive all details for the upcoming re-exam. Please read all the details carefully and let us know if you have any question.

1. Date and time of the re-exam:

The re-exam will take place on September 25, 2023, at 2 pm (s.t.). Please be there on time, which … Read more

Hi all,

With this email you will receive all details for the upcoming re-exam. Please read all the details carefully and let us know if you have any question.

1. Date and time of the re-exam:

The re-exam will take place on September 25, 2023, at 2 pm (s.t.). Please be there on time, which means at the latest at 1:45 pm. You will have 90 minutes to work on the re-exam.

2. Location of the re-exam:

All students will write the re-exam in the GHH Lecture Hall.

3. Further details:

It is not allowed to use (lecture) notes or a calculator during the re-exam. The re-exam is designed so that you can pass it without these materials. You do not need to bring your own paper.

Please note that you are allowed to participate in the re-exam only if you have registered in the LSF (or any other way according to the respective examination regulations) and if you have passed the mid-term exam.

Participation in the re-exam

Written on 08.09.23 by Leo Dessani

Hi all,

If you would like to take the IT Forensics re-exam, please respond briefly to the following survey (please vote only once!): https://kingsx.cs.uni-saarland.de/index.php/apps/forms/s/PPGQembCbRiK2Lw2ddJEgZ9n

The survey is not binding and does not replace the official exam registration! It… Read more

Hi all,

The survey is not binding and does not replace the official exam registration! It only serves us to estimate the number of participants.

Please participate in the survey until Friday next week at 11:55 pm. After that, we will announce more information about the exam via the CMS.

Time slots for exam inspection

Written on 08.08.23 by Leo Dessani

Hi all,

The exam inspection time slots have just been sent to the email addresses on file in CMS. The assignment of the time slots was based on the order of registration. If you have registered but did not receive an email with a time slot, please write an email to leo.dessani@uni-saarland.de.

Hi all,

Please note: Come only within your time slot and bring your student ID card with you!

As mentioned, the exam inspection will take place in the seminar room at the ground floor of the buildung C3.1 if you do not hear anything else from us.

Exam results and exam inspection

Written on 27.07.23 (last change on 27.07.23) by Leo Dessani

We have finished grading the exam!

The results are visible in the CMS. For technical reasons, the grade "5.0" will be shown if you did not register for the exam, but are registered for the course in the CMS. Of course, we will only enter your grade into the LSF if you were actually… Read more

We have finished grading the exam!

We have done our best to ensure that we entered the points correctly, though mistakes cannot be completely excluded.

Overall, you could reach 90 points. The best grade, 1.0, was awarded from 69 points. The passing limit was 37 points. The grade average for those present in the exam was 2.65, the median grade 2.7.

The exam inspection will take place on August 10 at 10 am in the seminar room at the ground floor of the buildung C3.1 if you do not hear anything else from us. If you want to participate, write an email to leo.dessani@uni-saarland.de (subject: "Exam inspection IT Forensics 2023") until August 4. Please bring your student ID card with you to the exam inspection.

Main exam details

Written on 24.07.23 by Leo Dessani

Hi all,

With this email you will receive all details for the upcoming main exam. Please read all the details carefully and let us know if you have any question.

1. Date and time of the exam:

The exam will take place on July 26, 2023, at 2 pm (s.t.). You will have 90 minutes to work on the… Read more

Hi all,

With this email you will receive all details for the upcoming main exam. Please read all the details carefully and let us know if you have any question.

1. Date and time of the exam:

The exam will take place on July 26, 2023, at 2 pm (s.t.). You will have 90 minutes to work on the exam.

2. Location of the exam:

All students will write the exam in the GHH Lecture Hall.

3. Further details:

It is not allowed to use (lecture) notes or a calculator during the exam. The exam is designed so that you can pass it without these materials. You do not need to bring your own paper.

Please note that you are allowed to participate in the exam only if you have registered in the LSF (or any other way according to the respective examination regulations) and if you have passed the mid-term exam.

IT forensics tutorial has to be cancelled today; alternative date on monday

Written on 20.07.23 by Leo Dessani

Unfortunately, the IT forensics tutorial has to be cancelled today at short notice. We are sorry for that. The tutorial will take place alternatively on: Next monday, 10 am (c.t.), exclusively online via the link shown on the home page of the CMS course.

Q&A tutorial

Written on 10.07.23 by Leo Dessani

Hi all,

Next week we will have a Q&A tutorial. If you have questions, please send them to Nico ( nicolas.feid@uni-saarland.de ) until the end of this week.

Course evaluation

Written on 06.07.23 by Leo Dessani

Hi all,

We ask you to participate in the course evaluation. Please do so by visiting the following links:

Lecture: https://qualis.uni-saarland.de/eva/?l=143438&p=cotmwq

Tutorial: https://qualis.uni-saarland.de/eva/?l=1434381&p=qler74

You can participate until the 16th of July.

Thank you.

Time slots for mid-term exam inspection

Written on 05.07.23 by Leo Dessani

Hi all,

We have just sent all the time slots for inspecting the mid-term exam to all those who have registered. If you did not receive an email to the email address on file in CMS, please contact me.

No lecture tomorrow, recording on Incident Response instead

Written on 05.07.23 by Leo Dessani

Hi all,

Tomorrow there will be no lecture. Instead you will find a recording on Incident Response in the CMS.

The exam inspection and tutorial will be held tomorrow as regular.

Results of mid-term exam

Written on 29.06.23 by Leo Dessani

We have finished correcting the mid-term exam. The results are visible in the CMS. With 20 out of 55 points, the exam is considered passed. If you passed, you can participate in the main and/or re-exam.

The exam inspection will take place on Thursday, July 6, from 2-4pm in HS 001, building E 1.3.… Read more

The exam inspection will take place on Thursday, July 6, from 2-4pm in HS 001, building E 1.3. If you want to participate in the exam inspection, please send an email to leo.dessani@uni-saarland.de.

Sample solution for last year's mid-term exam

Written on 09.06.23 by Leo Dessani

Hi all,

A sample solution for last year's mid-term exam is now available in the CMS.

Best,
Leo

Information about the mid-term exam

Written on 05.06.23 (last change on 05.06.23) by Leo Dessani

Hi all,

last year's mid-term exam is available in the CMS.

As announced, the mid-term exam will take place on June 15 at 4:00 pm s.t. in room E 2.2 (GHH) and will last 60 minutes. Questions may go up to the content covered in the last lecture (Chapter 6 up to DKIM). Notes are not… Read more

Hi all,

last year's mid-term exam is available in the CMS.

Registration is not required for the exam. However, in order to estimate how many participants would like to write the exam, we ask that you vote at the following link if you intend to take the exam. If you are not sure yet, select "Yes" in case of doubt.

https://kingsx.cs.uni-saarland.de/index.php/apps/forms/NAomQ7sTF23KaKHH

There will be no tutorial on the day of the mid-term exam.

If you have any questions, please contact us by mail.

Best,
Leo

Lecture this Thursday online only

Written on 09.05.23 by Leo Dessani

Hi all,

The lecture this Thursday will be online via Teams only.

Best,

Leo

Please bring your laptop

Written on 27.04.23 by Leo Dessani

Hi all,

This is a reminder to bring your laptop with Kali Linux to the tutorial today. Please also bring your laptop to the upcoming tutorials as we will perform practical exercises from time to time as mentioned in the first tutorial.

Best,

Leo

Participation in the tutorials

Written on 18.04.23 by Leo Dessani

Hi all,

There are currently more than 130 participants registered for the lecture IT Forensics in the CMS. Depending on how many participants are seriously interested in attending the tutorial on-site, the room capacity on Thursday may not be sufficient for all participants. In the past years, the number of participants with a serious interest in the tutorial has been about equal to the number of seats in the room we have been assigned. However, especially in the beginning, it is difficult to predict how many of you will attend the tutorial on-site.

We have therefore set up a survey to estimate how many of you would like to attend the tutorial on-site. The survey can be found at: https://kingsx.cs.uni-saarland.de/index.php/apps/forms/n4W3kfdmHk9D6G7e

Please participate in the survey only (!) if you want to attend the tutorial on-site! If you want to attend the tutorial online via zoom, do not participate in the survey! There is no disadvantage by participating online and in general there is no attendance requirement for the tutorial.

If you pariticipate in the survey, please do so until tomorrow, 7 pm. Check your mails after that, as we will let you know how attendance will be arranged (depending on the number of registrations).

If any of you have specific reasons why attendance is only possible on-site, please email me until tomorrow, 7 pm, at leo.dessani@uni-saarland.de.

Best,
Leo

Lecture slides of first lecture

Written on 17.04.23 by Nicolas Feid

Hi all,

The slides of the first lecture are now available in the CMS.

Best regards,

Nicolas

Show all

IT Forensics

The lecture deals with finding and evaluating legal evidence in IT systems, both for criminal prosecution and civil action.

Focus areas include, among others:

Processes of IT forensics (with a focus on incident response)
Analysis of storage media and file systems
Retrieval and analysis of RAM contents (e.g., cold boot attacks)
Attacks on passwords
(Basics of) evidence in civial actions and criminal proceedings
Role of technical experts in court

The lecture and the tutorial will be taught in English. Both will be held in a hybrid format and will not be recorded!

Lecture: Thursdays, 10-12 h (c.t.), in E1.3, HS 001, and Teams

https://teams.microsoft.com/l/meetup-join/19%3ameeting_N2Q0ZGFkZTctNjFiNC00NzczLThmMTMtN2JkYTVmYWE4ZjRl%40thread.v2/0?context=%7b%22Tid%22%3a%2267610027-1ac3-49b6-8641-ccd83ce1b01f%22%2c%22Oid%22%3a%228e1f3702-f35e-4390-a6d0-be9f3e70a03b%22%7d

Tutorial: Thursdays, 16-18 h (c.t.), in E1.3, SR 014, and zoom

https://us02web.zoom.us/j/81977492603?pwd=bUJDN3FxVVNCNCt1SThUU0thcnNmdz09

Meeting-ID: 819 7749 2603
Kenncode: 970660

Please note: Due to holidays, the lecture and the tutorial will not take place on 05/18 and 06/08!

Exam dates:

Mid-term exam: June, 15, 4 – 6 pm

Main exam: July 26, 2023, 2 – 4 pm

Re-exam: September 25, 2023, 2 – 4 pm