Digital Forensic 5 ass

© 2021 Post University, Waterbury, CT ALL RIGHTS RESERVED

Due Date: 11:59 pm EST Sunday of Unit 5

Points: 100

Overview:

As a digital forensic examiner, you are required to document the steps you take in an

investigation. For this assignment, you will write a ‘mock’ report that details how you

would process a 1GB USB drive.

Instructions:

List the steps you would take to acquire the data from the 1GB USB drive:

1. Discuss how you would prepare the Target Drive.

2. Explain what tool you would use to conduct the data acquisition.

3. Discuss what type of write blocker you would use (software or hardware).

4. Discuss what hash algorithm you would use to validate the data acquired.

Requirements:

• The report should be a minimum of two pages.

Be sure to read the criteria by which your work will be evaluated before you write

and again after you write.

CRJ326 – Digital Forensics

Writing the Report: Data Acquisition

© 2021 Post University, Waterbury, CT ALL RIGHTS RESERVED

Evaluation Rubric for Writing the Report: Data Acquisition Assignment

CRITERIA Deficient Needs

Improvement Proficient Exemplary

0 - 14 points 15 - 19 points 20 - 24 points 25 points

Target Drive Preparation

The process is missing.

The process is explained but missing significant key details.

The process is explained but missing some key details.

The process of preparing the Target Drive is fully explained.

Tool for Data Acquisition

The tool is missing.

The tool is explained but missing significant key details.

The tool is explained but missing some key details.

The tool for the acquisition is thoroughly addressed.

Type of Write Blocker

The type of write blocker is missing.

The type of write blocker is addressed but missing significant key details.

The type of write blocker is addressed but missing some key details.

The type of write blocker is thoroughly addressed.

0 - 8 points 9 - 11 points 12 - 14 points 15 points

Hash Algorithm The use of a hash algorithm is missing.

The use of an algorithm is addressed but missing significant detail.

The use of an algorithm is addressed but missing some key details.

The use of a hash algorithm to validate the data is thoroughly addressed.

0 - 2 points 3 points 4 points 5 points

Length Less than 2 pages n/a n/a At least 2 pages

Clear and Professional Writing and APA Format

Errors impede professional presentation; guidelines not followed.

Significant errors that do not impede professional presentation.

Few errors that do not impede professional presentation.

Writing and format are clear, professional, APA compliant, and error-free.