Reference no: EM133422211
Scenario
Eric Rjinswand, manager of Desiato Designs has asked for your help in relation to a possible security breach which was detected at their premises on the Elvington Industrial Estate on 16th January 2023. The company carries out contract design work (CAD/CAM) and prototyping (3D printing and small engineering projects) for customers around the world, including motorsports, automotive and aerospace industries.
Mr Rjinswand states that he came in to work as usual that morning at about 9 a.m. and found that the laptop which he also uses as his office machine was switched on. This was unusual, and he has said that he always shuts the machine down on leaving the office. On further inspection, he found a 4Gb SD card in the SD slot of the machine. He states that the card is not his and that the company does not use SD cards. The laptop has been wiped and re-installed by the company's IT department, in case of malicious software, but the SD card has not been touched. Mr. Rjinswand says that he kept it in his desk drawer while he attempted to find someone who could assist the company.
You have been provided with a bitwise copy of the device and asked to examine it in order to determine what, if any, potential breach(es) of security it may have been involved in. You have also been asked to provide the company with further advice about forensic response to incidents of this type in the future.
In particular, two main tasks have been assigned to you, as detailed below (N.B. Task 2 contains two related parts).