Digital Forensics

Within the Master's Degree in Cybersecurity, the Digital Forensics course represents a fundamental discipline for the analysis and handling of digital evidence in both criminal and civil contexts.
The course provides advanced knowledge and operational skills for the proper handling of digital evidence, adopting an interdisciplinary approach that integrates technical, methodological, and legal aspects. Particular attention is devoted to complex organizational environments, where investigative needs, compliance requirements, and potential legal implications coexist.
Digital forensics is approached as an applied scientific method aimed at reconstructing relevant events from digital evidence, according to the principles of:
· reproducibility,
· traceability,
· documentation,
· legal defensibility.
The course integrates:
· theoretical and scientific foundations,
· national and European legal frameworks (e.g., GDPR, eIDAS),
· operational procedures and international standards.

Knowledge and Understanding
At the end of the course, students will be able to:
· understand the scientific principles of digital forensics and the characteristics of digital evidence;
· analyze the relevant national and European legal framework;
· understand the role of international standards in the management of digital evidence.
Applying Knowledge and Understanding
Students will be able to:
· apply forensic methodologies for the identification, acquisition, preservation, and analysis of digital evidence, ensuring chain of custody;
· operate in complex organizational environments, interacting with multiple business functions;
· apply incident response procedures in line with international standards.
Making Judgements
Students will develop the ability to:
· assess the admissibility, integrity, and reliability of digital evidence;
· select appropriate methodologies based on the operational context;
· balance investigative needs with legal constraints, particularly with regard to the protection of fundamental rights.
Communication Skills
Students will be able to:
· produce clear, structured, and well-documented technical reports;
· present evidence and conclusions in a coherent and verifiable manner.
Learning Skills
Students will develop the ability to:
· independently update their knowledge in response to technological and regulatory developments;
· address new types of digital evidence by applying forensic methodologies.