You need to prepare a forensic report with a maximum of 2000 words. Students need to explain the procedures they followed to find the location of the bomb.
• Acquisition – Describe the process in which you acquired evidence. You should be comprehensive
in detailing your process/methodology. It is typical to see some form of data validation listed, for
example, MD5/SHA1 values for the evidence collected.
• Analysis – This can vary based on the scope of your analysis, but you should describe what
tools/techniques you used as well as your results. If you used multiple tools you should provide
tool version numbers so your results can be cross-validated by another examiner. You should provide enough information so another examiner who was provided your evidence files should be able
to confirm/dispute your findings.
• Steps Taken – Be detailed. Remember, your results should be reproducible. Include software and
hardware used. Do not forget to include version numbers. You also need to include snapshots of
your practical analysis to demonstrate various steps of investigation.
• Evidence – This should include the GPS location and the picture of the area where the bomb is
placed