This project aims to provide an opportunity for students to apply forensic investigation competencies gained throughout this course.

Required Source Information and Tools

The following tools and resources will be needed to complete this project:

• A web browser and access to the internet to perform research for the project
• Microsoft Word (or compatible and Microsoft PowerPoint (or compatible)
• Explain the rationale for computer forensic activities.
• Explain computer forensic investigation and incident response procedures.
• Determine how to obtain forensic evidence.
• Analyze laws related to computer forensics.
• Apply core competencies learned throughout the course to a single project.
• Maintain the necessary skill set to apply effective investigative techniques using the latest technologies
• Project Part 1: Preparing for a Digital Forensic Investigation
• Project Part 3: Obtaining Evidence from an ISP
• Project Part 4: Outlining Incident Response and Root Cause Analysis

?(Optional) A tool for creating basic network diagrams, such as draw.io or Microsoft PowerPoint.

o You can use any tool you are comfortable with to help you with diagrams. Learning Objectives and Outcomes

?Analyze forensic investigation and digital evidence collection procedures and best practices.

Overall Project Scenario

You are a digital forensic specialist at INFA 721 Investigations, a firm that contracts with individuals, companies, law enforcement, attorneys, and government agencies to conduct computer forensics investigations. INFA 721 Investigations also provides various forensic services, including consulting services regarding the findings of computer examinations, serving as technical experts and liaisons, and providing expert reports and expert witness testimony.

INFA 721 Investigations employees are expected to observe the following tenets, which the company views as the foundation for its success:

?Give concerted attention to clients’ needs and concerns

?Follow proper procedures and stay informed about legal issues

Deliverables

The project is divided into four several parts (25 points each). Details for each deliverable can be found in this document.

?Project Part 2: Researching Forensic Best Practices and Creating Procedures

Project Part 1: Preparing for a Digital Forensic Investigation

Scenario

Your manager has just scheduled a meeting with an important prospective client, and she has asked you to be part of the team preparing for the meeting. The prospective client is Brendan Oliver, a well-known celebrity. Last night, Mr. Oliver’s public relations team discovered that someone obtained three photos that were shot on his smartphone and tried to sell the images to the media. Due to the sensitive nature of the pictures, Mr. Oliver and his team have not yet contacted law enforcement. They would like to know if INFA 721 Investigations can provide any guidance or support related to the investigation—or, at the very least, if INFA 721 Investigations can help them prevent similar incidents from occurring in the future.

At this time, they do not know how the photos were acquired. The public relations team wondered if a friend, family member, or employee could have gained direct access to Mr. Oliver’s phone and obtained the photos. However, the phone is usually locked with a passcode when Mr. Oliver is not using it. In addition, Mr. Oliver emailed the pictures to one other person several months ago. He has not spoken with that person in the last few weeks, but he does not believe that person would have shared the photos with anyone else.

Your manager plans to use this initial meeting with Mr. Oliver and his public relations team to establish rapport, learn more about the case, and demonstrate the firm’s expertise. The company sees this as an opportunity to build future business, regardless of whether they are retained to help with the investigation of this case.

Tasks

To help the team prepare for the meeting, you to consider and record DETAILED responses to the following questions:

1.What is the nature of the alleged crime, and how does the nature of the crime influence a prospective investigation?

2.Based on the limited information provided in the scenario, what is the rationale for launching an investigation that uses computer forensic activities? Would INFA 721 Investigations and law enforcement need additional information to determine if they should proceed with an investigation? Why or why not?

3.What would you share with the client about how investigators prepare for and conduct a computer forensics investigation? Identify three to five key points that are most relevant to this case.

4.What sources of evidence would investigators likely examine in this case? Provide concrete examples and explain your rationale.

5.What should the client, investigators, and others do—or not do—to ensure that evidence could be used in a court of law? Using layman’s terms, explain any laws and legal concepts that should be considered during collecting, analyzing, and presenting evidence.

• What questions and concerns do you think the client will have?
• What questions should the team ask the client to learn more about the case and determine the next steps?