Task 2: Case Project (5 Marks)
A distressed employee calls you because she has accidentally deleted crucial files from her hard drive and can’t retrieve them from the Recycle Bin. Describe the options or methods that you believe might be used to recover the files. Your solution may contain a list of questions to ask her about her system before you carry out your methods.
Deliverable: Write a 300-500 word report outlining the OS that the employee may be using, formulate interview questions that may help you to recover data, and highlight the possibility of data recovery in the report.
Task 3: Research Project (5 Marks)
As part of the duties of a digital forensics examiner, creating an investigation plan is a standard practice. Write a paper that describes how you would organise an investigation for a potential fraud case. Also, list the methods that you plan to use to validate collected data from storage devices such as MS Word, MS Excel and emails, with hashes. Specify the hash algorithm you plan to use, such as MD5 or SHA1.
Deliverable: Write a 300-500 word report that outlines standard investigation management and data validation methods.
This assessment task covers digital crime, forensic process and procedures, data acquisition and validation, e-evidence, e-discovery tools and equipment. This assessment has been designed to ensure that you are engaging with the subject content on a regular basis. More specifically it seeks to assess your ability to:
o determine the legal and ethical considerations for investigating and prosecuting digital crimes
o formulate a digital forensics process
o evaluate the technology in digital forensics to detect, prevent and recover from digital crimes
o analyse data on storage media and various file systems
o collect electronic evidence without compromising the original data
o evaluate the functions and features of digital forensics equipment, the environment and the tools for a digital forensics lab