ICT613 — Digital Forensics Assessment Help
Assessment 4 — Individual Assignment — Report and Presentation
Overview
The purpose of this assignment is to develop the student’s skills in Digital Forensics.
Timelines and important information
Percentage value of Task: 25% (15% report + 10% presentation)
Report (1,500 words) and Presentation (6 min).
Due: Report: Friday Week 11, 5 PM, Presentation: during week 12 class. Submitting your work late will attract a 10% reduction of mark for each day beyond the due date. A delay of more than 5 days will result in being granted a 0.
Presentation:
- Students are required to create a short 6-minute presentation (no less than 5 and no more than 8) that includes audio which presents a summary of the report findings. The presentation should consist of at least 10 slides excluding the title slide and references slide.
- Slides should only show topics/headings and descriptions should be provided by the presenter. Therefore, avoid writing paragraphs or long lines.
- Add graphical elements to the slides that make them beautiful and support understanding of the content. Avoid using general figures.
- Use a proper contrast between the background and text.
- Be creative and do not read from the text during the presentation.
- Be prepared for Q&A.
Assignment Overview:
In this assignment, you will take on the role of a digital forensics investigator tasked with examining digital evidence in a simulated case. Digital forensics is the process of preserving, analysing, and presenting digital evidence in a legal context. Your goal is to conduct a thorough investigation, document your findings, and prepare a comprehensive report that can be used in court.
Assignment Tasks:
- Case Introduction:
You are a digital forensics investigator hired by XYZ Corporation, a leading tech company specializing in software development and data analytics. XYZ Corp has recently experienced a significant cybersecurity breach, resulting in the theft of sensitive customer data and intellectual property. The company suspects that an insider may be involved, but external threats cannot be ruled out.
Evidence Collection:
Identify and list the digital devices and storage media that may contain relevant evidence. Develop a plan for collecting and preserving the evidence to maintain its integrity.
Forensic Analysis:
Use appropriate digital forensics tools and techniques to analyse the collected evidence. Identify and document any suspicious files, network activity, or other digital artifacts. Determine the timeline of events and any potential vulnerabilities exploited.
Documentation:
Create a detailed report of your findings, including but not limited to:
- Chain of custody for evidence
- Description of the tools and methods used
- Analysis of digital artifacts
- Conclusion regarding the incident
- Recommendations for further actions
Legal Implications:
Discuss the legal and ethical considerations related to digital forensics investigations. Explain how your findings may be used in court and the importance of maintaining the chain of custody.
Presentation:
Prepare a presentation summarizing your investigation and key findings. You may use slides or other visual aids to support your presentation.
Reflection:
Reflect on the challenges and ethical dilemmas you encountered during the investigation.
Discuss what you learned from this assignment and how it relates to real-world digital forensics practices.
General Assessment Requirement
Incomprehensible submissions — Assessments provide the opportunity for students to demonstrate their knowledge and skills to achieve the required standard. To do this, assessment responses need to be both clear and easy to understand. If not, SISTC cannot determine that students have demonstrated their knowledge and skills. Assessments will, therefore, be marked accordingly including the potential for 0 (zero) marks where relevant.
Check with marking rubric: Before submitting your assessment, you should check it against the assessment criteria and the marking rubric included in this specification to ensure that you have satisfactorily addressed all the criteria that will be used to mark your submission.
Feedback
Feedback will be supplied through Moodle. Authoritative results will be published on Moodle.
Academic Misconduct
To submit your assessment task, you must indicate that you have read and understood, and comply with, the Sydney International School of Technology and Commerce Academic Integrity and Student Plagiarism policies and procedures.
You must also agree that your work has not been outsourced and is entirely your own except where work quoted is duly acknowledged. Additionally, you must agree that your work has not been submitted for assessment in any other course or program.
Marking Rubric
CriteriaExcellent (5)Good (3–4)Fair (1–2)Poor (0)Case Introduction
No case
description provided.
Incomplete or unclear case description.Basic case description but lacks depth.
Adequate case
description, provides context.
Evidence Collection
No evidence collection plan or chain of
custody.
Lack of evidence collection plan and poor chain of custody
documentation.
Evidence collection plan is minimal, chain of custody is basic.
Evidence collection plan is present but lacks detail,chain of
custody is acceptable.
Forensic AnalysisNo use of forensic tools or techniques.Minimal use of forensic tools, no documentation of findings.
Limited use of forensictools, findings are poorly
documented.
Moderate use of forensic tools, findings are adequately
documented.
DocumentationNo report provided.Report is missing key sections, and there are no references.Report lacks organization and critical sections, minimal referencing.
Report is structured but missing some sections, references are presentbut not
well-utilized.
Legal ImplicationsNo discussion of legal implications.Minimal discussion, lacks depth or relevance.
Basic discussion of legal considerations, mentions chain of
custody briefly.
Adequate discussion of legal implications, addresses chain of
custody.
PresentationNo presentation provided.Presentation lacks clarity, professionalism, and visual aids (if used).Poor presentation quality, limited use of visual aids.
Presentation is somewhat clear and professional, with minimal use of visual
aids.
ReflectionNo reflection provided.
Superficial reflection with minimal insight into challenges or real-world
applications.
Basic reflection on challenges and real- world relevance.
Thoughtful reflection on challenges and real-world
implications.
Overall Score
Unsatisfactory performance, significant
deficiencies.
Needs improvement in multiple areas.
Satisfactory performance, meets minimum
requirements.
Good performance, meets expectations.
