IS4670: Project: Investigate Evidence and Create a Report of the findings

IS4670: Project: Investigate Evidence and Create a Report of the findings

Purpose
The purpose of this project is to provide an opportunity for students to apply the forensic investigation
competencies gained throughout this course.
Learning Objectives and Outcomes
 You will be able to understand the process of conducting a digital forensic investigation.
 You will be able to understand the value of digital forensic investigations to organizations.
 You will be able to fulfill the role of an intern conducting a forensic investigation in a specific
business situation.
Required Source Information and Tools
The following tools and resources will be needed to complete this project:
 ITT Tech Virtual Library
 Internet
Project Logistics
The project has one deliverable as per the following details:

Deliverables
Scenario

Check your essay before you submit. See exactly what your professor sees.

See your AI and plagiarism results before your instructor does.Get the exact same report your professor uses. Trusted by 50,000+ students worldwide.

Get Plagiarism Report Humanize My Essay

Part 2: Examine Forensic Image
Tasks
Now, you must conduct a review of the workstation forensic image(s), identifying communications,
applications, and data pertaining to any leak of sensitive information via the Web site. Due to time
constraints, this review should be conducted in the most efficient manner possible, using details from your
previous investigation of network traffic to identify the workstation(s) and user profile(s) of greatest
interest for forensic review.
Perform the following steps:
1. Review demo labs and research the Internet to examine how P2 Commander is used to gather
forensic data.
2. Examine files, communications, and applications of interest within the profile(s) identified by your
earlier investigation.
Findings
IS4670: Project: Investigate Evidence and Create a Report of the

3. Identify items with potential evidentiary value and investigate each.
4. Report how this software can help you in your proposed research.
5. Document the process used to identify each item of interest and any details that provide cause for
further action.
Add this documentation detailed in the instructions above to your case file. This document should include
dates and details of the investigator. All documentation should be made using a standard word processor
format compatible with Microsoft Word.
Part 3: Create Report of Findings
Tasks
For the final part of this investigation, you must create a report of your investigation and its findings for the
owner of Corporation Techs.
Perform the following steps:
1. Detail the process of acquisition and protection of each item of evidentiary value reviewed
(example: workstation host media was forensically captured and the image used for all
subsequent evaluations).
2. Detail the investigative process, together with indicators for detailed investigative review and
assumptions made during the process.
3. Detail items of potential  IS4670 IS4670 IS4670 IS4670