Lecture this Thursday online only
The lecture this Thursday will be online via Teams only.
Please bring your laptop
This is a reminder to bring your laptop with Kali Linux to the tutorial today. Please also bring your laptop to the upcoming tutorials as we will perform practical exercises from time to time as mentioned in the first tutorial.
Participation in the tutorials
There are currently more than 130 participants registered for the lecture IT Forensics in the CMS. Depending on how many participants are seriously interested in attending the tutorial on-site, the room capacity on Thursday may not be sufficient for all... Read more
There are currently more than 130 participants registered for the lecture IT Forensics in the CMS. Depending on how many participants are seriously interested in attending the tutorial on-site, the room capacity on Thursday may not be sufficient for all participants. In the past years, the number of participants with a serious interest in the tutorial has been about equal to the number of seats in the room we have been assigned. However, especially in the beginning, it is difficult to predict how many of you will attend the tutorial on-site.
We have therefore set up a survey to estimate how many of you would like to attend the tutorial on-site. The survey can be found at: https://kingsx.cs.uni-saarland.de/index.php/apps/forms/n4W3kfdmHk9D6G7e
Please participate in the survey only (!) if you want to attend the tutorial on-site! If you want to attend the tutorial online via zoom, do not participate in the survey! There is no disadvantage by participating online and in general there is no attendance requirement for the tutorial.
If you pariticipate in the survey, please do so until tomorrow, 7 pm. Check your mails after that, as we will let you know how attendance will be arranged (depending on the number of registrations).
If any of you have specific reasons why attendance is only possible on-site, please email me until tomorrow, 7 pm, at firstname.lastname@example.org.
Lecture slides of first lecture
The slides of the first lecture are now available in the CMS.
The lecture deals with finding and evaluating legal evidence in IT systems, both for criminal prosecution and civil action.
Focus areas include, among others:
- Processes of IT forensics (with a focus on incident response)
- Analysis of storage media and file systems
- Retrieval and analysis of RAM contents (e.g., cold boot attacks)
- Attacks on passwords
- (Basics of) evidence in civial actions and criminal proceedings
- Role of technical experts in court
The lecture and the tutorial will be taught in English. Both will be held in a hybrid format and will not be recorded!
Lecture: Thursdays, 10-12 h (c.t.), in E1.3, HS 001, and Teams
Tutorial: Thursdays, 16-18 h (c.t.), in E1.3, SR 014, and zoom
https://us02web.zoom.us/j/81977492603?pwd=bUJDN3FxVVNCNCt1SThUU0thcnNmdz09 Meeting-ID: 819 7749 2603 Kenncode: 970660
Please note: Due to holidays, the lecture and the tutorial will not take place on 05/18 and 06/08!
Mid-term exam: June, 15, 4 – 6 pm
Main exam: July 26, 2023, 2 – 4 pm
Re-exam: September 25, 2023, 2 – 4 pm