Reference no: EM132166293

LAB: FILE ANALYSIS INSTRUCTIONS

1. Use the lab virtual environment for this assignment where specific instructions for tasks and deliverables are located. After completing the lab, write a lab report that includes all of the required deliverables, screen shots of each operation, and any additional information you gathered.

2. You are also required to include at least one page of written content with a minimum of 2 referenced citations that discusses your findings from each of the lab operations. This can include reasons why the findings are important, actions the organization can take to solve any discovered problems, and any other pertinent information you discovered. This content can be included anywhere in your lab report as long as you meet the one page requirement.

3. Your report must also include Biblical integration that relates a Bible verse, passage, or concept to the assignment. This will count as one of your required citations.

4. APA style references must be included for each citation used.

5. Extra credit sections are not required but, if you complete them, earned points will be used to offset missed sections in the other parts of the lab.

You can use any tools available to you on the lab system but keep the focus on recovering information without destroying the original files.

Client: Liberty Vacation Planning Inc. (LVP)

Project: File Analysis

1. Project Objectives

With this statement of work, LVP is engaging you to conduct a forensic fila analysis of the suspicious executable file unknowingly downloaded to one of its networked workstations. The objectives of this assessment are as follows:

- Create a digital case file using P2 Commander and index the files on the suspect hard drive. Use your own name as the name of the case file.
- Identify the name and location of the downloaded file.
- Generate an annotated report of the investigation using P2 Commander.

2. Project scope

The scope of the file analysis project is as follows:

- The network-connected workstation named Windows7

Note: Any items not listed here are considered out of scope for this project; the addition of out of scope items to the project scope will not be made without prior approval and authorization from LVP and will be handled through change requests or as separate SOWs.

3. Project deliverables

The deliverable(s) for this project are as follows:

a. Proof of indexed drive in P2 Commander case file

This proof will be provided in the following manner:

- A screenshot of the P2 Commander window showing the number of sorted files in the case.

b. Proof of the name and location of the virus file

This proof will be provided in the following manner:

- A screenshot showing the name and location of the file within the suspect drive.

c. Proof of annotated report

This proof will be provided in the following manner:

- A screenshot showing the P2 Commander report of the investigation with your notes indicating the file location.

4. Access to system

We have dedicated a Windows workstation on our internal network (Windows7) for use in your review. From the dedicated machine, you may access the P2 Commander software.

Use the user account provided in the following table to access our network:

5. Project schedule

All services outlined under the project scope will be completed within two weeks of receiving this statement of Work.

Note: any changes to project objectives or project scope will be handles through change requests or separate SOWs.

6. Authorization

This Statement of Work will serve as written authorization for this assessment activity.