Computer Science : Security and Forensic Tools
Section 1: Overview of Assessment
This assignment assesses the following module learning outcomes:
- Understand, select and utilise an extensive range of forensic and security tools appropriate to the case study environments encountered;
- Self-manage investigations of cases;
- Organise and present information via written or oral reports.
The assignment is worth 48% of the overall mark for the module.
Broadly speaking, this part of the assessment for the module consists of an individual forensic case study. You will be provided with a forensic image of a suspect’s computer which will be made available to you from the following shared location:
S:\FET\CSCT\SecurityAndForensicTools-UFCFJ6-30-2\Coursework image 2019-20\
This Encase image file contains evidence items supporting a particular case scenario – it is your job to examine this image file for evidential artefacts, and to build a picture of the case scenario.
You may use whatever tools you consider appropriate.
Aims of this assignment
The principle aims of this assignment are to allow you to demonstrate:
- The ability to use a variety of cyber security and digital forensics tools to recover and analyse evidence items from a forensic image.
- Professional responsibilities associated with forensic analysis.
- Report writing skills.
Section 2 provides more details on the Task Specification. Section 3 describes the coursework deliverables and Section 4 presents the feedback mechanism. Section 5 provides the marking scheme. The marking criteria against which your report will be marked are in Section 6. The forms needed for this report (contemporaneous notes and provenance templates) are provided in the Appendix A and B.
Security and Forensic Tools UFCFJ6-30-2 Page 4 of 12
Section 2: Task Specification
Case Scenario
Case Name: SugaRisker Case
Suspect: SugaRisker
After an increase in the amount of sugar related deaths, and a surge in obesity rates, the Government of the United Kingdom wrote into statute that Sugar Drinks are made to be illegal. Due to most of the population drinking these kinds of drinks on a regular basis, an uproar rose with many protesting on the streets. The Government was able to deal with this and put the protesters down. The active protest has died down. However, a dark market has begun for the sale of sugar drinks across the United Kingdom. There has been a particular rise in the Cwmbran area. An individual who goes by the alias of SugaRisker has been suspected of selling sugar drinks. His computer has been seized and needs investigating.
Security and Forensic Tools UFCFJ6-30-2 Page 5 of 12
Section 3: Deliverables
A detailed report, which includes:
- A summary of what happened, based upon the results of your investigation,
- The provenance of each evidential artefact you have identified, using the submission form found in Appendix A,
- A map of how the evidential artefacts link together,
- Your contemporaneous analysis notes.
You should submit a document file, readable in Microsoft Word or Adobe PDF, via BlackBoard by 14:00 on Thursday 2nd April 2020.