BN309: Validating and Testing Computer Forensics Tools and Evidence - IT/Computer Science Assignment Help

ASSIGNMENT TASK:

TASK:

Assignment Questions:

Objective: The objective of the assignment is to compare Computer Forensics Tools and acquire data from a drive, perform data recovery using different techniques and tools, analysing it and finally performing the validation of acquired data. In addition, students are required to document all steps in a report, and the report should be formal so that it can be used in a legal proceeding. Marks will be awarded based on the sophistication and in-depth presentation the of the techniques explored.

Case Study: You have been assigned a case of embezzlement. A 16GB USB is found from the suspect’s office, and it is expected the USB has digital clues that may be related to the case.The USB contains several Doc files, Excel files, a couple of image files, and some text files.

Section 1: Data Acquisition

Prepare a forensic image (bit stream copy) using any two standard tools from Table 1 with the record of data deletion. In the report, you need to include the screenshots of each step. You will need this image to perform the consecutive tasks. You need to cover the challenges to, and make a successful acquisition what are the relevant format to use and why. Describe steps required for search and seizure.

Section 2: Data Recovery
The suspect has deleted three image files from the USB, recover these files and explain the method (with screenshots) and tool you used. (300 words)
In addition, recover the data from recycle bin, explain the procedure with screenshots. You need to recover the metadata of these files (200 words)
 

Section 3: Data Analysis

Inspect all files in the USB, use a hex editor and analyse if there is any hidden data in these files. Provide screenshots of your analysis. Describe the tools that can be used for analysing the deleted files, and also describe the benefit(s) for conducting a window registry analysis

Section 4: Data Validation
Explain different methods of data validation and use one of them to validate data on USB.
Explain how to verify the file extension if it has been altered using relevant tools.
Demonstrate with snapshots the data validation as well as detecting the file extension alteration.

This BN309: IT/Computer Science Assignment has been solved by our IT Experts at onlineassignmentbank. Our Assignment Writing Experts are efficient to provide a fresh solution to this question. We are serving more than 10000+ Students in Australia, UK & US by helping them to score HD in their academics.Our Experts are well trained to follow all marking rubrics & referencing style.

Be it a used or new solution, the quality of the work submitted by our assignment experts remains unhampered. You may continue to expect the same or even better quality with the used and new assignment solution files respectively. There’s one thing to be noticed that you could choose one between the two and acquire an HD either way. You could choose a new assignment solution file to get yourself an exclusive, plagiarism (with free Turnitin file), expert quality assignment or order an old solution file that was considered worthy of the highest distinction.