Digital Forensics: Syllabus

Instructor: Ahmad Almulhem
Office: 22/407-2
Email: ahmadsm at kfupm
Office Hours: 11:00-12:00 daily or by appointment (email me)

Course Description

COE589 is a research-oriented graduate course in digital forensics. It aims to provide an extensive background suitable for those interested in conducting research in this area, as well as for those interested to learn about digital forensics in general. The course focuses on the technical issues and open problems in the area. Topics include fundamentals of digital forensics; digital forensics models, multimedia forensics; OS artifacts forensics; file carving; live and memory forensics; network forensics; mobile devices forensics; current tools and their limitations; legal and ethical issues.


  • Computer Forensics
  • Mobile Forensics
  • Network Forensics
  • Research Topics in digital forensics


Graduate standing. A student is expected to have working knowledge in

  • operating systems
  • computer network
  • programming
  • information security


There is no required textbook. Topics are based on selected readings/papers.


  • 25% - Classwork (assignments, presentations)
  • 20% - Midterm Exam (in class)
  • 50% - Term Project
  • 05% - Class participation


  • Attendance is required according to KFUPM policies. A DN grade is reported after 6 absences (20%).
  • Classwork must be submitted on time (1 hour grace period). Late penalty is -5% per hour thereafter.
  • No tolerance for cheating nor plagiarism. KFUPM regulations will be enforced in such cases.

Disclaimer: Techniques and tools discussed in the class are strictly for educational purpose. DO NOT try them on a system which you don't own or for which you don't have permission. Otherwise, you might get yourself in serious legal consequences.

Author: Ahmad Almulhem

Created: 2017-02-06 Mon 21:05