Assessment item 2 – Tasks and Research Project

back to top

Value: 15%Due Date: 11-Sep-2020Return Date: 07-Oct-2020Submission method options: Alternative submission method
TASK
back to top

Note:A Study Planner tool has been provided with this subject to support the assessment process. This tool provides information about the submission flexibility of assessment tasks, and a way to organise adjustments to submission dates. A link to the Study Planner can be found on the Interact2 site.

Task 1: Reflection on Hands-on Projects (5 marks)

Complete the following hands-on projects from your textbook:

1. Hands-on activity from Chapter 1, page 43 – 52 including analysing digital evidence using Autopsy and exploring additional features of Autopsy
2. Hands-on Project 1-3
3. Hands-on Project 1-6

Deliverable: Write a 1000 – 1500 words (up to five A4 pages) report on lessons learned from these projects. Comment on some of the features you learnt using Autopsy in hands-on activity 1 and reflect on lessons learnt for remaining two hands-on project. You can write at least two lessons learned from each of the hands-on projects.

Task 2: Case Projects (5 marks)
Complete the Hands-on Projects 4-4 and 4-5 from your textbook (Nelson, Phillips, & Steuart, 6th edition, 2019, p. 191-192). In these projects you will be working with FTK Imager Lite and will be exploring hash values of text files. Once complete these projects using FTK Imager Lite, repeat the hash value calculations using WinHex editor as well. Compare the hashing results from any two tools, i.e. FTK Imager, WinHex editor and Get-FileHash.
Deliverable: Write a 500-1000 words paper after completing these projects and report what have you learned about the hashing functions and also the digital forensics tool, FTK Imager Lite and WinHex editor. Provide screenshots of the steps completed in the projects showing the results of hash values of files used. Show your results of the hash values on MS Word document.

For tasks 1 and 2 deliverables:

When you work on Hands-on project and screenshots to support the progress or steps, the screenshot must include at least your Interact 2 login name anddate as a proof of your work. For each task or Hands-on, one snapshot of your working screen showing i2 site, your login and date will suffice the requirements. Mark will be reduced or will be awarded zero for any tasks or Hands-on projects that do not comply with this requirements. An exemplar screenshot will be available on subject i2 site.

Task 3: Research Project (5 marks)

Research at least three hex editors available for digital forensics investigations that you can use for your investigations. Write a one to two page paper describing different features of these three hex editors. Also, describe how these hex editors can be used to validate the digital evidence.
Deliverable: Write a 500-1000 word report that outlines various features of hex editors and their digital evidence validation capabilities.

Note:Combine deliverables of all three tasks mentioned above in a single document (only MS Word (preferable) or pdf, please note other formats e.g. *.zip, *.rar etc are NOT allowed) and then submit that one / single document through TURNITIN.

RATIONALE
back to top

This assessment task will assess the following learning outcome/s:

• be able to determine and explain the legal and ethical considerations for investigating and prosecuting digital crimes.
• be able to formulate a digital forensics process.
• be able to evaluate the technology in digital forensics to detect, prevent and recover from digital crimes.
• be able to analyse data on storage media and various file systems.
• be able to collect electronic evidence without compromising the original data.
• be able to prepare and defend reports on the results of an investigation.

MARKING CRITERIA AND STANDARDS
back