CO4514 Digital Forensic Technology.

Assignment
Perform a forensic investigation into digital evidence.

Learning Objective 1: Analyse, interpret and report on digital evidence.

Learning Objective 2: Use and extend a technical vocabulary necessary to interact with stakeholders in a digital forensic investigation

Perform and report on individual parts of a digital forensic investigation.

Check that the disk acquisition has been performed correctly.

Maintain investigative documentation.

Use forensic tools to analyse and interpret digital data.

Create an expert report containing the findings from your investigation.

Keep contemporaneous notes

This is a simulated investigation and doesn`t include the analysis of lots of irrelevant data. The evidence that is provided is small and doesn`t include any tricks. You will however need to interpret the data/evidence and draw your own conclusions based on the evidence you find.

You will create an expert report to communicate your findings. See the scenario below for further information about your investigation. You will keep notes of your investigative actions contemporaneously; they should be as long as is necessary but should reflect your investigation process accurately.

You should copy your contemporaneous notes to the end of your report and submit a single document.

Assignment Scenario
You are a forensic investigator working for the UCLAN High Tech Crime Unit. You have been contacted by the Managing Director of the company Vamos Solutions`. One of their employees has been accused of stealing company secrets.

The employee has attempted to smuggle company secrets out of the work building by copying company secrets onto a USB data storage device. While leaving the building the employee was detained by on-site security and the USB storage device was discovered. This USB storage device has been processed by a forensic imaging technician and the forensic image has been obtained.

You have been provided with a forensic image of the USB data storage device. This is called exhibit CST/001. This is available for download via Blackboard and is available under CO4514->assignments->co4514ass2year1.e01. This is anevidence file that contains the USB image file and must be viewed in forensic software such as Autopsy.