Assignment 2 - Tasks and Forensics Report

Value: 30%

EASTS (online)

Task

Task 1: Recovering scrambled bits

W/5¿Q5;¿- ¿=¿%! 5¿7=#15 !  ¿ '=95¿ /=#¿%!  ¿ 5! '5¿%=

¿ /-#)£¿Q- /¿%! 5¿ /=#¿!#5¿;-''-!#¿ 5; - 5 ¿#! ¿'- -#1¿!#¿ /5¿'# 5 #5 ¿=#7¿! 5 ¿ŸŸ§ŸŸŸ¿ 5; - 5 ¿9 5= 57¿7=-'

§¿ /5¿ - )¿3 !%¿  '#5 =;'5¿ - 5 ¿- ¿% ' - '

-#1£¿m#¿3=9 §¿!#5¥ /- 7¿!3¿ /5¿%!  ¥  =33-9)57¿ 5; - 5 ¿= 5¿ - )

§¿#5 ¿ 5 5= 9/¿/= ¿ 5 5='57£åëåë   £3! 5# -9%=1£9!%¿Óš'¿e= 9/¿›Ÿ•åë. You will be required to restore the scrambled bits to their original order and copy the plain text in your assignment.

Deliverable: Describe the process used in restoring the scrambled bits and insert plain text in the assignment.

Assignment 2 Task 2 - Revealing hidden information from an image

An image file 'ITC597_Assi2_Task2.bmp' is available below. This image file contains hidden text.  You are required to reveal the hidden text and copy the text into your assignment under this task.  If you are asked for a Passphrase, use: iTc597201530  

I have specifically not provided any details on the tools or procedure you can follow to reveal the text from the image.  While you may discuss issues and options available on how to do this with your fellow subject mates on the Discussion Forum, please do not provide detailed instruction to others.

For this task I will provide an image with hidden information in it. You will be required to reveal the hidden information.

Deliverable: Describe the process used to reveal the hidden information from the image and copy the revealed information in the assignment in plain text.

Task 3: Forensics Report

In this major task you are assumed as a Digital Forensics Examiner. Considering a real or a hypothetical case you are required to produce a formal report consisting of facts from your findings to your attorney who has retained you. You are free to choose a forensics scenario which can be examination of a storage media (HDD, USB Drive etc), spoofed email, unscrambling bits, revealing information from an image or any other appropriate scenario you can think of.

Deliverable: A forensics report of 1800-2000 words.

Rationale

This assessment task covers data validation, e-discovery, steganography, reporting and presenting, and has been designed to ensure that you are engaging with the subject content on a regular basis. More specifically it seeks to assess your ability to:

determine the legal and ethical considerations for investigating and prosecuting digital crimes

analyse data on storage media and various file systems

collect electronic evidence without compromising the original data;

evaluate the functions and features of digital forensics equipment, the environment and the tools for a digital forensics lab;

compose technical tactics in digital crimes and assess the steps involved in a digital forensics investigation;

prepare and defend reports on the results of an investigation