Computer Forensics Assignment

Computer Forensics Assignment

In this assignment you will work on the first steps of seizing and imaging an evidence disk. And create a well-organized report that has documentation with Text and Pictures about your work.

Objectives:

– Learning how to seize a digital evidence found on the scene of the incident

– Being aware of the Dos and Don’ts when handling the evidence

– Filling the chain of custody and Learning its importance.

– Identifying the tools, both hardware and software, required for imaging the evidence data

– Preforming the imaging process which can be cloning or just imaging

– Validating the created image of evidence data

Context: [Fictional]

Scenario: The XYZ security team received a notification that suspicious cyber activity is taking place in Wilson Building. Surveillance cameras showed that a person, who could be the suspect, was seen in room Wilson 106 and then he left. When the team arrived at the scene, they only found a USB drive that could have been used in implementing the suspicious activity. They decided to seize it so they can perform the needed analysis to identify its content.

Scene Location: Wilson 106

· [For pictures, you can use your own place if you cannot access Wilson 106]

Evidence: A USB drive

· [a please have/use your own USB blank flash drive for this work. For faster performance you can use 8GB or less drives. Also, you can use SAU machines in case your machine is not powerful enough.]

Please follow all the steps/guidelines/phases below, as much as possible, however points in green only will be considered while grading.

· Will a warrant be needed in this case? Justify your answer and Add legal references [ 5 pts]

[Based on: Scientific Working Group on Digital Evidence.]

· General Instructions: [Seizing the Evidence]

1- Ensure the safety of all individuals at the scene. [X]

2- Protect the integrity of evidence. [X]

3- Evaluate the scene and formulate a search plan. [X]

4- Identify potential evidence. [The USB drive given to you]

5- All potential evidence should be secured, documented, and photographed. [ 5 pts ]

a. For this assignment No need to secure; just document and photograph.

i. In the report, the caption for photos/figures is required.

6- Conduct interviews. [X]

7- Any item to be removed from the scene should be properly packaged and secured. [X]

Looking for Coursework Help Services In USA go to Homework Market