|
|
| Revised CSEC 650 Lab 2 Grading Rubric 7/07/17 |
| CSEC 650 2175 3131 |
| Criteria | Comments and Feedback 100 points |
| Part II, Step 3 -1.a.(5 points) | You included screen shots of file results after using :ls" command Part II, Step 3 -1.a. - Notes |
| Part II, Step 3 -2. (5 points) | You included screen shots of results after using " sha1sum UpdatedLab.dd" command, Part II, Step 3 -2. - Notes |
| Part II, Step 3 -5.b. (5 points) | You included screen shots of results after using " mount" command, Part II, Step 3 -5.b. - Notes |
| Part II, Step 3 -8.a. (5 points) | You included screen shots of results after using “/620aca” command, Part II, Step 3 -8.a. - Notes |
| Part II, Step 3 -8.b. (5 points) | You included screen shots of results after locating hash value strings for "Cain.exe, password.exe, Abel64.exe and badcracker.exe" files, Part II, Step 3 -8.b. - Notes |
| Part I Step 13 (5 points) | You included screen shots of results noting file change differences for "John.exe, with last access date and date stamp data, Part II, Step 3 -9.d. - Notes |
| Part II, Step 3 -9.f.(5 points) | You included screen shots of results using “less john.pot” file, Part II, Step 3 -9.f. - Notes |
| Part II Step 3 (5 points) | You included screen shots of results listing “md 5-related files and where they were located, Part II, Step 3 -11.e. - Notes |
| Part II, Step 3 -11.f. (5 points) | You included screen shots of results passwords for "Vilkp, Showe and Damad", Part II, Step 3 -11.f. - Notes |
| Part II, Step 3 -13.b. (5 points) | You included screen shots of results after using “less graphics” command, Part II, Step 3 -13.b. - Notes |
| Part II, Step 3 -13.b. (5 points) | You included screen shots of results after using “gThumb” command, Part II, Step 3 -13.b. - Notes |
| Part II, Step 3 -15.a. (5 points) | You included screen shots of graphic results to determine necessity of requesting a search warrant, Part II, Step 3 -15.a. - Notes |
| Part II, Step 3 -16.c. (5 points) | You included screen shots of results after using “less ../updatedlab.compressed” command, Part II, Step 3 -16.c. - Notes |
| Part II, Step 3 -16.g. (5 points) | You included screen shots of results after using passwords to unzip files, Part II, Step 3 -16.g. - Notes |
| Lab Notes Sheet (10 points) | You completed Lab Notes Sheet, including screenshots and relevant information |
| Chain of Custody Form (5 points) | You completed a Chain of Custody Form to include in your final Forensics Examiner Report for Lab 2 |
| Report Writing Format Step 10 (20 points) (6 Parts I,II, III, IV, V & VI) | You completed Final Report using format, answering all questions, incorporating relevant Lab Notes, including using chain of custody form. |
| DFCI Revised 7/07/2017 |
ShiaRo
GradingRubic.xls
