ICT613 – Digital Forensics Assessment 4 – Individual Assignment – Report and Presentation

Overview

The purpose of this assignment is to develop the student’s skills in Digital Forensics.

Timelines and important information

• Percentage value of Task:25% (15% report + 10% presentation) Report (1,500 words) and Presentation (6 min).
• Due: Report: Friday Week 11, 5 PM, Presentation: during week 12 class.will attract a 10% reduction of mark for each day beyond the due date. A delay of more than 5 days will result in being granted a 0.

Presentation:

• • Students are required to create a short 6-minute presentation (no less than 5 and no more than 8) that includes audio which presents a summary of the report findings. The presentation should consist of at least 10 slides excluding the title slide and references slide.
• • Slides should only show topics/headings and descriptions should be provided by the presenter. Therefore, avoid writing paragraphs or long lines.
• • Add graphical elements to the slides that make them beautiful and support understanding of the content. Avoid using general figures.
• • Use a proper contrast between the background and text.
• • Be creative and do not read from the text during the presentation.
• • Be prepared for Q&A.

Assignment Overview:

In this assignment, you will take on the role of a digital forensics investigator tasked with examining digital evidence in a simulated case. Digital forensics is the process of preserving, analysing, and presenting digital evidence in a legal context. Your goal is to conduct a thorough investigation, document your findings, and prepare a comprehensive report that can be used in court.

Assignment Tasks:

• • Chain of custody for evidence
• • Description of the tools and methods used
• • Analysis of digital artifacts
• • Conclusion regarding the incident
• • Recommendations for further actions

Reflect on the challenges and ethical dilemmas you encountered during the investigation. Discuss what you learned from this assignment and how it relates to real-world digital forensics practices.

7. Reflection:

Prepare a presentation summarizing your investigation and key findings. You may use slides or other visual aids to support your presentation.

6. Presentation:

Discuss the legal and ethical considerations related to digital forensics investigations. Explain how your findings may be used in court and the importance of maintaining the chain of custody.

5. Legal Implications:

Create a detailed report of your findings, including but not limited to:

4. Documentation:

Use appropriate digital forensics tools and techniques to analyse the collected evidence. Identify and document any suspicious files, network activity, or other digital artifacts. Determine the timeline of events and any potential vulnerabilities exploited.

3. Forensic Analysis:

Identify and list the digital devices and storage media that may contain relevant evidence. Develop a plan for collecting and preserving the evidence to maintain its integrity.

2. Evidence Collection:

You are a digital forensics investigator hired by XYZ Corporation, a leading tech company specializing in software development and data analytics. XYZ Corp has recently experienced a significant cybersecurity breach, resulting in the theft of sensitive customer data and intellectual property. The company suspects that an insider may be involved, but external threats cannot be ruled out.

1. Case Introduction:

General Assessment Requirement

• Incomprehensible submissions –Assessments provide the opportunity for students to demonstrate their knowledge and skills to achieve the required standard. To do this, assessment responses need to be both clear and easy to understand. If not, SISTC cannot determine that students have demonstrated their knowledge and skills. Assessments will, therefore, be marked accordingly including the potential for 0 (zero) marks where relevant.
• Check with marking rubric: Before submitting your assessment, you should check it against the assessment criteria and the marking rubric included in this specification to ensure that you have satisfactorily addressed all the criteria that will be used to mark your submission.

Feedback

Feedback will be supplied through Moodle. Authoritative results will be published on Moodle.

Academic Misconduct

To submit your assessment task, you must indicate that you have read and understood, and comply with, the Sydney International School of Technology and Commerce Academic Integrity and Student Plagiarism policies and procedures.

You must also agree that your work has not been outsourced and is entirely your own except where work quoted is duly acknowledged. Additionally, you must agree that your work has not been submitted for assessment in any other course or program.

Marking Rubric