Assignment Details:
You are required to carry out a forensic examination of the evidence file that you have been supplied with and forensically examine its contents. You will need to produce an expert witness report that describes the formal investigation methodology that you followed and presents your findings. It is therefore essential that you follow a formal investigation procedure.
You will have to describe in detail the methodology that you followed in order to analyze the evidence file. You will have to identify and describe the procedures for all the different phases of your investigation including the tools you used for the analysis. Your findings should be presented in a factual way, following the guidelines that were discussed in class.
Your findings should include any relevant information that was discovered during your investigation. You should illustrate your analysis with screen dumps of the tools you used. Your expert witness report should be no more than 2000 words. You also need to produce contemporaneous notes that reflect the work you have undertaken and justify how you maintained the chain of custody.
It is advisable you make use of a specialist tool to securely record your digital notes. Your contemporaneous notes should be submitted as an Appendix to the expert witness report and there is no word count for the notes.
