Assignment

Part 1

Please check this closely. I see someone post it on the studypool about a year ago.

You'll revisit your Virtual Machine (VM) PC and use it for the scenario below. From earlier in the class, you should have installed the VMWare Horizon View Client application and accessed the Windows 7 virtual PC assigned to you. In case you need a reminder on how to do that, see the instructions under Week 1 on Accessing the Workspace VM.

Scenario: You have been called intoinvestigate an employee at your company for misusing company computers, stealing other employee's identity's and allegedly running a side-business. He uses an old Windows 7 system with the user-id of "Anybody". Using the virtual PC given to you as the suspect's computer and what you've learned in class so far, you should conduct an investigation on the live computer. You can use any of the tools/applications on the PC, but cannot download any others. (Reminder, there is no Internet Access in this segregated environment.) Gather and document as much evidence as you can from the target PC. Since this is an internal employee issue, you don't need to worry about search warrants or potentially corrupting evidence. You just need to generate a report for his manager and the HR director.

For this assignment, you need to create a professional report on what you have found. Place your answers, findings, and screenshots in a Word compatible file with proper attention to writing, grammar, punctuation, and spelling.

Part 2

Using the Internet, find a news story that was covered in the last six months that included a computer forensics investigation and expert testimony from the investigator during the trial. Discuss the story in your Original Posting. Provide a summary of the case in your own words. From reading the article, did the investigator help the prosecutor make the case? What do you think are the most important skills that an investigator can have during a trial?