Charlie's computer we identified the Cygnus free hex editor software. Also discovered a program folder name called invisible secrets 2.1. Inside this folder we got three folders. After each was folder checked, we had discovered that one of the folders is empty and other two folders have dll files. The dlls file name is "blowfish","jpgcarrier" and "bmpcarrier". These dlls file are supports to suspicion that means it is steganography tools.

When investigating Jo's computer he attached two flash drive with his compute. Also he downloaded TrueCrypt software on his computer. Recent Documents folder shows a hidden folder with images.

Pat's computer we identified vnc free edition software installed in his computer. In his computer recent documents folder shows tool keylogger log on 12/03, 12/04 and 12/08/2009 date. Also in program files shows real vnc folder.

When we investigation terry's computer hard disk image we got the keylogger software download, VNC free edition software install and Eraser software install his computer. Also he downloads realvnc Software in his computer. When click realvnc folder then we can see logmessages.dll, winvnc4.exe and wm_hooks.dll file in here.

You need working here

Part A

Accuracy of practical work-

- Does it follow the proper forensic methodologies taught in the course?

- How the investigation follow current professional forensic practice taught in this course?

- Does the investigation identified all possible evidence that can be presented based on given police evidence

Part B -

- Finally prepare a report for your team members to carry the investigation further

o Details of digital forensic methodologies and process flow used to investigate this case. Provide appropriate screenshots to show detail process of the investigation.
o Identify ethical and legal issues are applicable for the case you are working on
o Write appropriate justifications to support your chosen methodologies and process.
o Justification of choosing ethical and legal issues that are relevant to the case.

Marking sheet

Report quality:
- How well the report documents the forensic investigation activities
- Is the report easy to follow
- How well the flow of the investigation were sequentially presented in the report
- Does it prepare with formal report writing style such as table of content, page numbers, appropriate referencing (if any), cover page and so on.

Evidence of the practical work:

- Does the report properly evidence (using screenshots or video or any other possible means) the practical work with detail explanation of possible steps followed for creation/ acquisition/investigation of the case?