Reference no: EM132650911

SIT703 Advanced Digital Forensics - Deakin University

Learning Outcome 1: Apply knowledge of security on Windows network domain and follow standard procedure to investigate different types of cyber-crime

Learning Outcome 2: Investigate the usefulness of various forensic techniques and apply relevant methods to gain access and recover computer crime data

Learning Outcome 3: Analyze and review findings to further probe and investigate computer crimes

Learning Outcome 4: Reflect on findings and prepare reports for the target audience with justified findings

Purpose

Students should demonstrate their ability to review and critique the digital forensic hackathons hosted in recent years and their write-ups. Understanding these digital forensic tasks and their technical solutions will significantly help students deepen the understanding of the industry's standard practice and general expectations of forensic abilities in the job market. Hackathon experiences and achievements have been valuable in the cybersecurity industry. Students will identify, investigate, and evaluate six forensic hackathon tasks and the associated write-ups. Students will be assessed on their ability to identify the appropriate tasks and write-ups, reproduce the technical solutions, justify the technical findings, reflect on the learning experiences, and present a professionally written essay.

Instructions

Students are required to independently write an essay of approximately 4,000 words and exhibits to support the findings and a bibliography. This essay should consist of the following parts:
• a professionally made title page with student name and student ID
• an abstract of 200 words capturing the highlights of the findings
• a non-technical section summarizing the six identified hackathon tasks and brief descriptions of their write-ups along with justifications of their digital forensic relevance
• a non-technical section critiquing the issues of the existing write-ups of each hackathon task in multiple perspectives
• a technical section reproducing the solutions of the six hackathon tasks by using proper digital forensic tools with supporting evidence (screenshots)
• a non-technical section reflecting personal learning experiences towards solving these tasks and aligning these to our curriculum
• conclusion (around 150 words)
• reference (Harvard style)

All submitted essays will be assessed in the following five facets. Each facet has 12 maximal marks, and the total mark for the essay is 60. The marking rubrics on the next page reflect a summary of these facets with various competence levels.

The five facets are explained as follows:
1. Quality of presentation. The essays should be written independently with original ideas, which will be measured by the TurnItIn similarity scores. Deakin values independent and original work. The essay should contain approximately 4,000 words in well-organized paragraphs and sections without grammar mistakes. The paragraphs and sections should follow logical orders and be well connected. A proper referencing style (Harvard) should be followed.

2. Quality of identified hackathon tasks. The six identified hackathon tasks should be independent of each other so that they cover a broad spectrum of digital forensic investigations. The hackathon tasks should be obtained from credible venues, and they should be less than three years old and maximally five years old. The existing write-ups need to be summarized in concise language. All six identified tasks should be justified to be related to the digital forensic investigation in the essay. All necessary links and references should be provided in the essay.

3. Quality of analyzing existing write-ups. The write-ups should be analyzed thoroughly to identify the room for improvement. Most write-ups are suboptimal, missing certain steps, and even contain errors because they are quickly written by hackathon participants soon after the event. If a hackathon task has multiple write-ups, different versions of write-ups should be compared to hypothesize the best method to solve the hackathon task; if there is only one write-up available, an alternative solution should be proposed to improve the current solution.

4. Quality of solving the identified hackathon tasks. Individual solutions should be developed based on the proposal in the previous section. Individual solutions towards the hackathon tasks should be provided with evidence like screenshots with step-by-step instructions. The solutions should be correct and fully explained. Significant contributions beyond the existing write-ups should be highlighted and summarized.

5. Quality of reflections. Personal reflections on the learning experiences of solving these hackathon tasks with alignment to our curriculum should be presented. In particular, forensic tools and investigation methods should be aligned with the topics covered in the unit. Highlights of learning experiences should be synthesized.

Attachment:- Digital Forensic Report.rar