You are employed by Coventry University Digital 4n6 Ltd as a trained Digital Investigator. Your line manager, [Module Leader/Lecturer] has informed you that an employee of the University, Bronnau Gwirion is suspected of selling university property on eBay. It is unclear whether this is property that the employee has legitimate access to or has been stolen or otherwise acquired. The intention is that you will conduct a search of a location identified by your line Manager that the employee uses as a workspace. It is on Coventry University property. There is a video attached of the location – you are to identify what equipment you would prepare and take with you in order to complete your task. You should identify what equipment you would seize with a rationale and justification for so doing. You should identify relevant legislation as part of this rationale and any considerations that would affect this seizure.

0 Comments

(216SE)

Coursework

Planning to secure Evidence

Module Leader: Bob Bird
Assignment handed out week commencing 10/10/2016. Upload to Moodle by 11:50pm on 25/11/2016. This assignment represents 30% of the total module mark. This is an individual submission.
Student Name:
SID:
I certify that this is my own work and that I have read and understand the University Assessment Regulations.
Signature:
This coursework is testing your ability to both write contemporaneous notes and carry out an effective evidence gathering and imaging activity.
Question 1 (100 marks)
You are employed by Coventry University Digital 4n6 Ltd as a trained Digital Investigator. Your line manager, [Module Leader/Lecturer] has informed you that an employee of the University, Bronnau Gwirion is suspected of selling university property on eBay. It is unclear whether this is property that the employee has legitimate access to or has been stolen or otherwise acquired. The intention is that you will conduct a search of a location identified by your line Manager that the employee uses as a workspace. It is on Coventry University property. There is a video attached of the location – you are to identify what equipment you would prepare and take with you in order to complete your task. You should identify what equipment you would seize with a rationale and justification for so doing. You should identify relevant legislation as part of this rationale and any considerations that would affect this seizure.

  • Write contemporaneous notes detailing the preparations you will take, the equipment you will prepare and other considerations pertinent to the task (You may use Case Notes, handwritten notes (which must be scanned to submit) or as a word document)
  • You will submit an executive report in .doc .docx or .pdf format (Max 1500 words)

NOTE: you should not actually perform any analysis, you should identify your preparation and plan to gather and secure the evidence as a first responder. This activity is in anticipation of performing this task but at this stage is the planning ONLY not the execution of it.
Try and limit your answer to between 1000 and 1500 words. The word count is for the word processed document – not the contemporaneous notes. (The contemporaneous can be as long as you like, but keep in mind they should really be relatively concise and make sense.)
Submission Date
Cut-off date: You should submit your completed assignment to arrive no later than the cut-off date: 25/11/2016. Write your solutions to this coursework in a word-processed document with an appropriate appendix in which you should include your contemporaneous notes. Each page should be numbered and headed with the title of the coursework, your name and your matriculation number, for example:
216SE CWK James Doe 2122222
Additional instructions on submission can be found in Appendix 1.
Plagiarism Note:
As with all assessed work, both the research and written submission should be your own work. When submitting this work you are explicitly indicating that you have read the rules on plagiarism as defined in the University regulations and that all work is in fact your own, except where explicitly referenced using the accepted referencing style.
Objectives
This particular coursework covers learning outcomes 2 and 3 as shown below:

  1. apply computer forensic methodology to computer crime investigation
  2. prepare and use computer forensic tools for computer crime investigation

You should ensure that the acquisition is in accord with the ACPO Good Practice Guide for Digital Evidence (Published March 2012) Version 5 and the Digital Imaging Procedure 2007 58-07 annotated as such in your notes.

Marking Scheme

Your work will be marked out of 100 with the breakdown as follows:

Assessable Item
Style (How readable and useful are your notes and report?)
Mark
Clear and well-written contemporaneous notes, not a reflection or summary. Report clearly identifies all elements.30
Less clear contemporaneous not a reflection or summary. Report structured but some issues.25
Contemporaneous notes, may have omissions or ambiguity. Report is adequate but incomplete in some elements.15
Notes of some description, although not contemporaneous. Report has identifiable flaws and errors.10
No notes. No Report.0
Preparation (How you planned for the evidence gathering)
 
Exemplary preparation and considers all the issues that may be presented30
Adequate preparation, some issues missing, but main ones covered25
Some attempt made and some of the main issues covered15
Some preparation, but most of the main issues missing10
No issues presented0
Compliance with ACPO Guidance and rules of evidence (Understanding of guidelines and their application)
Complete understanding correctly annotated20
Comprehension demonstrated with adequate contemporaneous notes15
Some comprehension demonstrated with adequate contemporaneous notes10
Limited comprehension demonstrated with some contemporaneous notes5
Poor comprehension and totally inadequate notes.0
Securing Evidence (Your contemporaneous notes and how you went
through the process of identifying securing the evidence)
All issues surrounding securing evidence dealt with adequately20
The main issues surrounding securing evidence dealt with15
Enough issues dealt with to make seizure evidentially sound10
An attempt made to cover the issues, but evidentially questionable5
Any other incorrect attempt or procedure0

 
General Comments:
 
 
 
Appendix 1: Submission Instructions and Extensions Total 100
Follow these instructions carefully. Failure to do so will mean sections or all of the coursework marked being zeroed.

  1. The coursework should be submitted as an online submission. Your submission should be either as a MS Word or PDF document.
  2. Your submission consists of two parts:
  3. a) The first is a word-processed document detailing what you need to do in order to carry out the evidence gathering. This document can outline what you had to do and provide any photographs or other items that cannot be included in the contemporaneous notes.
  4. b) The second is your contemporaneous notes which will are a record of ‘exactly’ what you are planning to do in order that evidence can be gathered. This should be included as appendix A. It is acceptable to provide contemporaneous notes as scanned handwritten notes, a print out from Case Notes, or any other forensic note taking software that you can acquire and use (providing you are adhering to any license agreements that may be required).
  5. Extensions will only be given if supporting evidence is produced, so only ask for an extension if you really need it and if you have no supporting evidence to support your request it will be rejected. Any such request should be directed to Registry.

"Are you looking for this answer? We can Help click Order Now"

UK BEST WRITING