FTK
Analyzing & Reporting Investigation Results
Scenario:
A Dell Latitude E5450 Laptop (Model #P61J, Serial #D355) was recovered from a potential crime scene by Officer G. Davis. The laptop was recovered from a Robert Morris University campus dormitory on February 6, 20XX at 18:50. RMU Police Officer Davis removed the laptop from the scene and transported it back to RMU Police Department for secure storage on February 6, 20XX at 19:30. RMU Officer D. Dodger performed an acquisition of the laptop and created a bit-stream image for you to analyze. The forensic image was created on February 7, 20XX at 13:30. You have been asked to analyze the forensic image of the laptop and create a forensic report of your findings.
Objective:
Analyze the digital artifacts contained in a forensic image file (supplied by instructor) and then write a 3 to 4-page summary report of your investigation findings.
Methodology:
Each student should follow the guidelines outlined in Chapter 14 of the course text for writing a report and presenting evidence.
Deliverable(s):
I. Abstract (Summary paragraph of report)
II. Body of Report
a. What systems/technologies were examined?
b. What specific files were examined? (type of files and count of each type)
c. What content was observed in the files?
d. How is the content of each file related to the case?
III. Conclusion – include your Expert Opinions about all files examined
IV. References (if applicable)*
V. Exhibits / Appendix
(continued on 2nd page)
PLEASE NOTE: As with all assignments in this course, your submitted work for this assignment CANNOT violate the RMU Academic Integrity/Plagiarism Policy as listed on page 7 of the course syllabus. ANY violation of the RMU Academic Integrity Policy will result in a 0% (F grade) in the course, and possible expulsion (i.e., removal) of the student from Robert Morris University. There will be NO exceptions made regarding the enforcement of the RMU Academic Integrity Policy.
* Any references should conform to APA (American Psychological Association) standards for text citation and listing of references. See your instructor for further details and examples.