BIT362 Digital Forensics

Assessment 3 (20%)
Due Date: Week 10
(see MOODLE for exact times)

Assignment Overview
Digital Corpora have given us the rights to use their scenario in our assignment. These are fictitious
scenario. You are a forensics investigator. You are to choose one of the following cases to solve. You
are required to complete an Expert Witness Report for a court examining the case. It is expected to
use multiple tools and techniques to establish the claim.

Choose of the following Digital Corpora Scenarios:

* Nitroba University Harassment Scenario --- A fun-to-solve network forensics scenario.

* M57-Patents --- A complex scenario involving multiple drives and actors set at a small company
over the course of several weeks.

* National gallery DC 2012 --- a fictional attack on the National Gallery DC, foiled in 2012.

* 2018 Lone Wolf Scenario --- A scenario involving the seizure of the laptop of a fictional person
planning a mass shooting.

Links:

https://digitalcorpora.org/corpora/scenarios

Report (10%)

Cover Page: Name, Student ID, Subject Code.

Executive Summary

Introductions

Actors

Inventory

Timeline of Events

Key Findings (with techniques such as RAM, Network, USB, Phone, Search Analysis)

Appendix: Tools Generated Reports

Presentation (10%) – 3 minutes + 2 minutes questions

Present your findings in a video (or in classes).

Must be available to answer questions.

Due Date & Submission
By the due date, you must submit:

1. Name your file with your student number

2. Softcopy of your video link to MOODLE. By submitting on MOODLE you agree that the work
is yours unless properly cited.
3. Fail to submit may result in a fail.

Late submission of assignments will be penalised as follows:

 For assignments 1 to 5 days late, a penalty of 10% (of total available marks) per day.
 For assignments more than 5 days late, a penalty of 100% will apply.

Your submission must be compatible with the software (PDF/Word) in Melbourne Polytechnic,
Computer Laboratories/Classrooms.

Extensions: Under normal circumstances extensions will not be granted. In case of extenuating
circumstances—such as illness—a Special Consideration form, accompanied by supporting
documentation, must be received before 3 working days from the due date. If granted, an extension
will be only granted only by the time period stated on the documentation; that is, if the illness
medical certificate was for one day, an extension will be granted for one day only. Accordingly the
student must submit within that time limit.

Penalties may apply for late submission without an approved extension.

Penalties: Academic misconduct such as cheating and plagiarism incur penalties ranging from a
zero result to program exclusion.
Marking criteria:

Marks are allocated as indicated on each question, taking the following aspects into account:

Aspects Description
Analysis (if appropriate) Investigation, comparison, discussion
Explanation/justification Description/answer to the question
Presentation Inadequate structure, careless presentation, poor writing
Reference style Proper referencing if required
Copy from another student, copy from internet source/textbook,
Plagiarism
copy from other sources without proper acknowledgement

Marking Rubric for Exercise Answers

Grade HD D CR P Fail

Mark 80%+ 70%-79% 60%-69% 50%-59% < 50%

Excellent Very Good Good Satisfactory Unsatisfactory

Analysis Logic is clear and easy Argument is

Consistency logical Mostly consistent Adequate cohesion
to follow with strong confused and
and convincing and convincing and conviction
arguments disjointed

The presented
The presented The presented solution The presented
The presented
solution solution demonstrated an solution
solution
Effort/Difficulties/ demonstrated an demonstrated a high average degree of demonstrated a
demonstrated a low
extreme degree of degree of difficulty difficulty that poor degree of
degree of difficulty
Challenges difficulty that would that would be an would be an difficulty that would
that would be easy to
require an expert to advance professional average be too easy to
implement.
implement. to implement. professional to implement.
implement.

Components
Explanation/ All elements are
Components present present and Most components
present and well Lacks structure.
justification with good cohesion mostly well present
integrated.
integrated

Clear styles with

Clear referencing/ Generally good Unclear Lacks consistency
Reference style excellent source of
style referencing/style referencing/style with many errors
references.

Mostly good, but

Proper writing. Properly written, with Poor structure,
some structure or Acceptable
Presentation Professionally some minor careless
presentation presentation
presented deficiencies presentation
problems