Reference no: EM133187666

CO4514 Digital Forensic Technology

Learning Outcome 1: Critically evaluate technology (software and hardware) used during the investigation of digital crime

Learning Outcome 2: Critically evaluate tools, techniques and issues related to the recovery of digital evidence

Learning Outcome 3: Use and extend a technical vocabulary necessary to interact with stakeholders in a digital forensic investigation

Part 1 - Short Report

You are Submitting a single document which contains investigation for Part 1 and 2.

What to do:

You must research two different digital device and discuss how to obtain evidence from the digital device. You will be told which digital device you must research.
You must use the "CO4514 Assignment One Template" (located on Blackboard) for your short report.
This will require a deeper understanding of the underlying technology. You will be told which device to focus on.

Different devices bring their own challenges when it comes to evidence recovery or evidence acquisition. For example, some devices may support a full physical acquisition, some devices may not, and some devices may require a part acquisition using logical methods.

For this task, you are expected to analyse and understand your digital device, and then postulate ways in which to acquire evidence from this device. Part of your write-up should explain where and how evidence is stored on your device.

You should:
• Provide an overview of the digital device you have been assigned. This overview should focus on the hardware capabilities, and summarise the most important parts in relation to an acquisition of evidence
• Identify what kind of acquisition you can perform. This should be informed by your research and should be one of
o Full physical
o Logical
o Part-image
o Manual
• Justify why you believe this acquisition technique is the most appropriate for your specific advice. This justification should be informed by your research into the device.
• Identify and justify which tools you would use to obtain evidence from this device.
• Identify how you uphold the ACPO good practice guide principles. Do not repeat the principles here, this should be about YOU and obtaining evidence from your device. Essentially, you should tell me how you would apply the ACPO good practice guide.
• Identify any evidence artefacts you can obtain from your digital device.
• Explain and justify why those artefacts would be useful in prosecuting a crime.

Attachment:- Digital Forensic Technology.rar