Computer crime and the forensic investigation process; principles and practices; digital evidence on computer systems, hardware storage, the Internet, mobile devices. Computer forensics on data analysis; operating systems forensics; assisting cryptographic techniques; event timing; forensic disk imaging; data recovery; file reconstruction. Rules of evidence and standards; principles of evidential management; the expert witness; standards and ethics.