Cyber Incident Response Plan (CIRP) Report Writing - IT Assignment Help

Assignment Task

CIRP documentation

As part of your CIRP documentation, you should include a chain of custody form and an audit trail to record all your activities. Your audit trail should allow you to record contemporaneous notes alongside the standard operating procedures. The Investigation It was the 1st of October 2020 when you started your investigation.

You started thinking by asking yourself the following questions

• How should I start the investigation? How can I validate the customers’ complaints? And it hits you“I will create fake customers’ accounts and see if I’ll receive any spam emails,” you thought! What a great idea but is there any condition these fake accounts should meet to ensure they’re not targeted randomly? 

Write the answer to this question in your investigation report. Next step, you’re thinking:

• Where is the customer data saved and who has access to it?

• Is it possible that the marketing firm is the source of the data leak?

• What are the other ways that customers’ data could have been leaked?

• Could this be a work of an insider?

• What about the backups that are kept at a 3rd party facility?

• Could the website have been hacked so it’s leaking customers’ data before it goes to the database? Write the answers to these questions in your investigation report before you proceed After 2 weeks, you started receiving spam emails on the fake accounts you created. Eureka your idea worked! You ruled out the possibilities of a hacked website and backups leak. Hence, you decided to follow your hunch that the data is leaking from the database. However, how can you check your theory? Write the answer to this question in your investigation report as well. Two weeks later, you were right! and using the great solution you came up with earlier (which you should’ve written about in your investigation report because how can I know), there was one query that is asking for all customers’ emails for accounts that were created two weeks ago! The query was originated from an IP address assigned to a PC in the graphics art department. What do you think is happening? Write the answer to this question in your investigation report. The next day at 9.30 am, (you should know what date it is if you’re keeping up), you decide to investigate that PC after taking its hard disk using your forensics skills. Note, MXInc has a security room where you can store the hard disk you acquired from the suspect’s PC at the graphics art department. The security room is managed by Ms. Susan Harper and only accepts custody of evidence if the paperwork is complete. On the blackboard, you will find a copy of that hard disk called MXInc.vmdk that you need to download and perform your digital forensics investigation to get to the bottom of what is happening. Look for clues (hidden files, strange text files, etc.) and find the answer! 
A report that includes answers to the investigation questions above, the Cyber Incident Response Plan (CIRP) and the Results of your forensic investigation.

• The report is limited to 2000 words. Marking will stop at the 2000 words threshold. Hence, anything that is written beyond that will not be marked. Appendices are exempted from the 2000 words limit.

•I have already done the CIRP report and wrote 1200 words, I need 800 words on the investigation 
 

This IT Assignment has been solved by our IT Experts at My Uni Paper. Our Assignment Writing Experts are efficient to provide a fresh solution to this question. We are serving more than 10000+Students in Australia, UK & US by helping them to score HD in their academics. Our Experts are well trained to follow all marking rubrics & referencing style.

Be it a used or new solution, the quality of the work submitted by our assignment Experts remains unhampered. You may continue to expect the same or even better quality with the used and new assignment solution files respectively. There’s one thing to be noticed that you could choose one between the two and acquire an HD either way. You could choose a new assignment solution file to get yourself an exclusive, plagiarism (with free Turnitin file), expert quality assignment or order an old solution file that was considered worthy of the highest distinction.