PSB318SE: You are Working as a Forensic Examiner in One of the Reputed Forensic Services Company: Data Recovery and Advanced Digital Forensic Analysis Assignment, CU, Singapore

Assignment Learning Outcomes

On completion of this module, a student should be able to:

1. Explain the principles of data recovery and data protection techniques in a forensically sound manner in the network and mobile
2. Apply data recovery techniques to forensic investigation in the network and mobile environments.
3. Apply forensic methodology to digital corporate and crime investigation in an ethical and professional context and employ appropriate technically writing skills in its report
4. Acquire, analyze digital evidence, and determine appropriate incident response procedures on networks and the Internet.

SCENARIO

You are working as a Forensic Examiner in one of the reputed forensic Services Company “Imp Pvt. Ltd.” Located in Singapore. On 12^th January 2020, Gorge Lim contacted your office in regard to imaging a stolen corporate laptop computer (running a certain Operating System) and a corporate-issued mobile device (running Android/iOS platform), which had been recovered.

Gorge is requesting you to see what company documents may have been stolen by the suspect(s) and is requesting a full forensic examination and report for possible criminal charges & civil litigation. There is also suspicion of pilfering of data across the company servers by the stolen equipment.

Task:

• Investigation

You are required to research at least one open-source (free) forensic tool, learn how to use the tool by performing forensic investigation on the networked computing system.

A forensic examination of the given computing system (containing the above-mentioned case) is to be carried out using AccessData® FTK based forensic tools as well as open-source forensic tool/s for cross-checking.