501IT CW2 Computer Forensics Group Assignment Brief 2025 | CU

501IT Assignment Task

Introduction

This assignment aims to build upon the theoretical knowledge gained in the initial weeks and provide you with practical experience in analysing digital evidence using specialised tools and techniques. Throughout this investigation, you will have the support of your instructors to guide you through the process. The goal is to equip you with valuable skills in digital forensics that are applicable in real-world scenarios. In this introduction, we will provide an overview of the assignment and offer guidance on how to prepare for the investigation.

Component 2

Following on from Component 1 in CW1, this task involves conducting a digital forensics investigation as certified Digital Forensics Investigators for CU Group Forensics Labs. We have contractual arrangements with local law enforcement agencies to assist in criminal investigations that require expertise in digital evidence collection, analysis techniques, and evidence preservation.

In this case, we are tasked with gathering computer-based evidence related to a specific incident or crime. Our responsibilities include adhering to industry best practices, following UK ACPO guidelines, and documenting the investigation thoroughly from the crime scene to the laboratory analysis. The successful completion of this investigation will contribute to the broader criminal investigation and showcase our professional competence in digital forensics.

You will be tasked with an individual presentation of an evidence report following a forensic investigation. This presentation will be approximately 15 minutes in length, and you will also be required to submit a written report of approximately 2000 words.

The purpose of this component is to demonstrate your ability to effectively communicate the findings of a digital forensics’ investigation in a clear and concise manner. You will be presenting the evidence report that you have compiled after conducting a thorough forensic examination.

501IT The presentation should cover the following key points:

1. Introduction:
a.Provide an overview of the case and the scope of the digital forensics' investigation.
b.Include the date and location of the examination and the devices or media analysed.
c.Identify the parties involved in the case and the context of the investigation.

2. Methodology:
a.Describe the procedures and tools used during the examination.
b.Explain how you ensured the integrity and authenticity of the evidence.

3. Findings and Analysis:
a.Present the key findings of the digital evidence you have recovered and analysed.
b.Provide expert analysis of the evidence in the context of the investigation.
c.Highlight any crucial information that has a direct impact on the case.

4.  Interpretation and Conclusions:
a.Offer your expert opinions based on your analysis of the digital evidence.
b.Clearly state the conclusions and inferences drawn from the examination.

5.  Recommendations:

a.Suggest any further investigation or examination that might be necessary.
b.Offer insights into potential areas that may require additional scrutiny.

For the written report, you will expand on the points covered in your presentation, providing more comprehensive details of your investigation, methodology, findings, analysis, interpretations, and conclusions. The report should be well-structured, with clear headings and subheadings to facilitate easy navigation and understanding.

Remember to adhere to the guidelines and best practices of writing a digital forensics report for court. Maintain objectivity, accuracy, and clarity throughout both the presentation and the written report. Be sure to back up your findings with evidence from the investigation and use language that is understandable to a non-technical audience. The task should include documenting the steps taken in preparation to attend the crime scene and have the relevant authorisation e.g. a search warrant before attending the crime scene.

This component will test your ability to present complex technical information in a concise and accessible manner, showcasing your expertise in digital forensics and your skills in effective communication.
For more detailed information, please refer to the attached sheet.

501IT Submission Instructions:

• Individual Presentation: (40 Marks)
• A 15-minute presentation where you communicate the findings of your digital forensics' investigation.
• You can use slides, visual aids, or any other suitable means to support your presentation.
• Written Evidence Report: (60 Marks)
• A written report of approximately 2000 words that provides a comprehensive account of your forensic investigation.

Assessed Module Learning Outcomes of 501IT:

The Learning Outcomes for this module align to the marking criteria which can be found at the end of this brief. Ensure you understand the marking criteria to ensure successful achievement of the assessment task. The following module learning outcomes are assessed in this task:

1. Explain the principles of digital forensics and their application within the legislative structures and global context of cyber security.
   
2. Apply digital forensic methodologies to crime investigation in accordance with UK law and UK police investigation principles regarding digital evidence.
   
3. Evaluate the legal, ethical and professional issues involved in digital forensic investigation.
   
4. Deploy advanced technical writing skills to document digital evidence and accurately report on the findings of a forensic investigation.