This subject introduces students to the procedures related to computer forensics and digital investigations including formal case management and evidential best practices. The subject will start with an overview of operating system architectures, data structures and file systems. Students will explore the key principles associated with digital forensic processes, data hiding, evidence collection and validation required to perform forensic analysis. The subject will also cover how to conduct technical forensic processes that comply with legal requirements and documentation for forensic evidence, and the use of practical forensic tools.