Reference no: EM133749122
Digital Forensic
Assignment - Patents Case
Purpose: Analyze and evaluate various tools that are currently used for Digital Forensics.
Apply Digital Forensics tools and techniques to recover data from various sources.
Instructions:
You are required to investigate the provided M57 Patents Case data files using digital forensic tools such as EnCase, FTK, or SleuthKit. You will analyze disk images, USB drives, and other provided evidence to answer the questions below. Document your findings in a report with evidence and justifications for your conclusions.
Assessment Task:
Task 1: Identification of Illegal Digital Materials
Question 1: Is Jo the owner of the files found on the purchased machine? What evidence supports or rejects this?
Evidence Required: Screenshots and detailed analysis from forensic tools, metadata analysis, and email correspondence related to the files.
Task 2: Investigation of Secondary Market Sale
Question 2: How did the computer come to be sold on the secondary market? Who (if anyone) from the company is responsible for the sale of the machine?
Evidence Required: Analysis of financial records, email trails, and any communications or documents related to the sale of the machine.
Task 3: Analysis of Suspicious Activities
Question 3: Are there any other suspicious activities occurring within M57? Provide a detailed analysis of any findings.
Evidence Required: Comprehensive review of disk images, USB drives, and RAM dumps. Include any anomalies, deleted files, or hidden data.
Task 4: Comprehensive Report
Question 4: Summarize your findings in a structured report. The report should include:
Introduction: Brief overview of the case and objectives.
Methodology: Tools and techniques used during the investigation.
Findings: Detailed answers to the above questions with supporting evidence.
Conclusion: Summary of findings and any recommendations.