COS80013 Assignment 2: Internet Security Question | Swinburne

COS80013 Part A Incident Forensic Analysis Component 

Description You are required to forensically analyse artefacts provided by Starfleet to answer a series of questions. These questions help you piece together the incident attack path, identify IoC and TTPs, along with assets and users impacted. This allows you to provide a summary of events. To achieve this technically, you should make you of the labs and supplementary lecture content from week 6 onwards. You should also investigate via the Internet any additional information required. (PS: Given the project requires you to consider multiple artefacts which require investigation, resources like OpenAI will not assist. It could be used to complement your theoretical knowledge.) 

Completing this to the best of your ability will assist with components 2 & 3. This scenario is fictitious, and no domains, IPs and malicious files should be interacted with in any form. All persons within the scenario are personas and not real entities, nor the target organisation. All artefacts supplied are not malicious. 

Breakdown

• Refer to supporting files 
  oAssignment 2 Part A 
  osamba_log.csv oDC.log.txt o20250425.zip (extract memory image) 
  oAssignment 2 Part A Template 
• Read and understand each portion of the component, either in full or each portion sequentially and,
• Answer each portion'squestions in the provided template (Assignment 2 Part A Template) 
• Often this is to be a simple answer, such as an IP, domain, account, event, consider a brief description so your answer is different thank others for plagiarism 
• There are no long answers 
• Keeping track of the events in a timeline is suggested to assist with Component 2

COS80013 Submission

COS80013 Assignment 2 Part A Template

Rubric:

COS80013 Part B Incident Situational Report

Description 

You are required to take your findings and answers from Component 1 and write a Situation Report of the incident. It is meant to be a snapshot in time, reflecting an accurate and factual summary of the situation. Use the template provided, and again this does not need to be a lengthy in words, rather, capture the exact specifics which help relate the situation. The target audience can be considered a manager who is receiving an update. You will be able to also draw upon weeks 1 to 6 to assist with this. 

Rubric