Assignment Questions: Objective: The objective of the assignment is to acquire data from a drive, perform data recovery using different techniques and tools, analysing it and finally performing the validation of acquired data. In addition, students are required to properly document all steps in form a report, the report should be formal enough that it can be used in a legal process. Marks will be awarded based on the sophistication and the difficulties of the techniques explored.

Case Study: You have been assigned a case of embezzlement. A USB is found from the suspect’s office, and it is expected to have very important information regarding the case. The USB contains several Excel files, a couple of image files and some text files. Assignment Specification: Prepare a report on the following sections related to the case study scenario. You can use your own USB, create/delete files as mentioned in the scenario and perform forensics. Provide the list of references using IEEE referencing style at the end of the report.

Section 1: Data Acquisition Prepare a forensic image (bit stream copy) with the record of data deletion. Explain the method and tool you used for acquiring data. You will need this image to perform the consecutive tasks. Please submit this image with your assignment. (200 words)

Section 2: Data Recovery The suspect has deleted two image files from the USB, recover the files and explain the method (with screenshots) and tool you used. (200 words) In addition, recover data from recycle bin, explain the procedure with screenshots. (200 words)

Section 3: Data Analysis Inspect all files in the USB, use a hex editor and analyse if there is any hidden data in files. Provide screenshots of your analysis. (200 words)

Section 4: Data Validation Explain different methods of data validation and use one of them to validate data on USB. (400 words)