Wa0006.
Wa0006.
Work will only be accepted beyond the five working day deadline if satisfactory
evidence, for example, an NEC is provided. Any issues requiring NEC
https://ntu.ac.uk/current_students/resources/student_handbook/app
eals/index.html
If copied with the agreement of the other candidate both parties are considered
guilty of Academic Irregularity.
Penalties for Academic irregularities range from capped marks and zero marks to
dismissal from the course and termination of studies.
To ensure that you are not accused of plagiarism, look at the sections on
Plagiarism Support and Turnitin support.
I. Assessment Requirements
This assignment allows you to build your knowledge and critical evaluation of processes
and procedures used in computer forensics. To pass the coursework you must
demonstrate your understanding of the whole Computer Forensics process.
Assessment Scenario/Problem
The date is 1 July 2004. You have been called in by an organisation that suspects one of
its staff members is breaking organisational policy. Photographs of the scene can be
found below.
The staff member has joined a strange religious group that considers geometric shapes
to be very important. The staff member was warned in May 2004 against using
organisational resources to create, store, search the Web for or disseminate pictures of
such shapes.
You then decide to analyse a USB stick that was found. A file in this directory (ending
in .dd) contains a forensic image which (for the purposes of this scenario) was taken
from the USB stick. You will need to analyse that image.
Download the file and analyse it as much as you wish. Then answer the questions in the
online assessment. Some are multiple choice; some are multiple choice with more than
one correct answer; a couple require you to type in a number.
This assessment is designed to test your knowledge of correct procedures. There will be
questions addressing all stages of a forensic investigation.
The assessment will be available online on 9 December 2022. Once you start the
assessment, you will have 4 hours to complete it. All questions carry equal marks.
V. Moderation