800×600
Normal
0
false
false
false
EN-US
X-NONE
X-NONE
MicrosoftInternetExplorer4
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:”Table Normal”;
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:””;
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:”Times New Roman”,serif;}
Background
You are part of a team of digital forensic consultants who have been instructed to assist a Government Law Enforcement Agency, to investigate a suspected crime scene. The Director and Head of IT Security has informed you that the suspect’s machine is a part of an organisation’s network.
Individual Task
As a part of the team you are tasked to recommend the best practice to conduct networks forensics?
The team is to process the scene according to the Digital Forensics Analysis Methodology (Provided on Moodle). Please rely on the Case used in the practical part.
Group Task
You are required with your group members to conduct the seizure and examination of a crime scene (based on a case study provided by the module leader). It is expected from you, in this exercise, to apply the knowledge you gained from this module. It also required from each group to present their finding after the seizure and examination mission is completed.
Marking Criteria
Group Task
|
Requirement |
Marks |
|
Applying the best practise procedures during the investigation (Adhering to the ACPO guidelines)
|
20 |
|
Searching and finding all digital evidence
|
10 |
|
Proof of preservation of evidence
|
10 |
|
Documentation (completing the forms) |
20
|
|
Presentation of the finding (group)
|
20 |
|
Soft skills
|
10 |
|
Conclusion relating to chosen e-crime
|
10 |
Total = 100 Marks
Individual Task
|
Requirement |
Marks |
|
Introduction |
10 |
|
Structure of the report |
10 |
|
Depth of analysis |
25 |
|
Evidences relied on |
10 |
|
Adhering to the best practises |
25 |
|
Proper referencing |
10 |
|
Conclusion
|
10 |
Total = 100 Marks