Reference no: EM132323717 , Length: word count:3000
Digital Forensics Assignment -
Forensic investigation and reporting: An individual assessment in the form of a forensic report.
Scenario: Working as a forensic practitioner, you have been provided with an EnCase evidence image taken from a suspect's PC. The specific details of the suspect are unknown to you at this time, however you have been made aware that they are suspected of colluding with another individual to plan a variety of serious crimes.
The motives of the suspect are Fraud at this time. Task: Your first task will be to analyse the evidence image and obtain as many details as possible about the suspect and their actions, particularly in relation to any crimes they may be planning, or have already committed, and any accomplices with whom they may be working. You will conduct the analysis using EnCase, based on the skills you have gained during this course. You will need to make case notes/records for all of the details that you discover during your analysis for ultimate inclusion in a forensic report, which is the major deliverable for this assessment. Ensure that you clearly identify each of the digital artefacts that you discover in your forensic report (e.g. using file paths or other unique IDs) and that you record relevant metadata for each artefact (e.g. date/time created, last accessed, modified). Artefacts without supporting metadata will not be accepted for grading.
The forensic report should conform with the guidelines specified in Australian Standard 5388.4-2013 Forensic Analysis Part 4: Reporting, with specific focus on Section 9 - Report Contents.
This section will provide high-level guidance on the structure of your forensic report. In addition to the structural guidance provided by AS 5388.4, you must include a Conclusions section which summarises your key findings in relation to the case.
The word limit for the forensic report is 2,000 words (+10%). In addition to the forensic report, you will need to produce a document which justifies the analysis and reporting decisions that you have made. This should include a detailed discussion of the techniques that you used within EnCase and the associated artefacts located (referencing the forensic report where appropriate). It should also include a justification for the detailed sections included in the forensic report (beyond those specified by AS 5388.4).
The word limit for the companion document is 1,000 words (+10%).. You will need to strike a balance between the width of analysis (i.e. variety of artefacts analysed) and the depth of analysis.
Note - AS 5388.4-2013 standard report is attached and evidances pictures also attached.
Attachment:- Assignment Files.rar