Digital Forensics

1 SIT282 TRIMESTER 1 2013 ASSIGNMENT 1 NOTE: IF YOU HAVE NOT SIGNED AND SUBMITTED YOUR AGREEMENT, YOUR ASSIGNMENT WILL NOT BE MARKED AND YOU WILL BE DIS-ENROLLED FROM THE UNIT. This assignment covers material up to the week ending April 8. DUE: THURSDAY APRIL 25 BY 2 PM. NO EXTENSIONS allowed without medical or other certification. LATE ASSIGNMENTS will automatically lose 10% per day up to a maximum of three days, including weekends and holidays. Assignments submitted 4 or more days late will not be marked and are given zero. METHOD OF SUBMISSION: On-campus Burwood students will submit hard copies to Lei Pan through assignment drop-off boxes (faculty office in Building L at B). On-campus Geelong students will submit hard copies to Damien Hutchinson at the lecturer theatre or in the computer lab. Off-campus students email the electronic copy of the report to Damien Hutchinson at [email protected]. All assignments are required to have the assignment cover sheet attached, which is available at http://www.deakin.edu.au/sebe/students/Maximum size of your submission should be ten pages excluding the cover page and appendices. The font size should be no less than 10pt. (Please attach screen shots, file tables, and automated reports generated by FTK or ProDiscover as appendices. (No mark will be given if you fail to show the evidence of your work-out. i.e. the process carried out to produce your solution.) Please keep a copy of your assignment for reference in case the original one is lost or mishandled. 2 THE CASE: Donald Price is an employee from Joachim’s Art Gallery based in Melbourne, Australia. Mr. Price had been suspended from the gallery when an audit discovered that one of the pieces he was responsible for had disappeared. (This was a small watercolour of two boats.) Unfortunately, Mr. Price wiped the hard disk of his office PC before investigators could be deployed. However, a CD-ROM was found in the PC’s CD-ROM drive. Although Mr. Price subsequently...