Forensics report project

Scenario:

A Dell Latitude E5450 Laptop (Model #P61J, Serial #D355) was recovered from a potential crime scene by Officer G. Davis. The laptop was recovered from a Robert Morris University campus dormitory on February 6, 20XX at 18:50. RMU Police Officer Davis removed the laptop from the scene and transported it back to RMU Police Department for secure storage on February 6, 20XX at 19:30. RMU Officer E. Mallory performed an acquisition of the laptop and created a bit-stream image for you to analyze. You have been asked to analyze the forensic image of the laptop and create a forensic report of your findings.

Objective:

Analyze the digital artifacts contained in a forensic image file (supplied by instructor), generate an FTK Case Log Report, and write a 1 to 2-page summary of your investigation findings.

Methodology:

You will apply what you have learned about the FTK software (in FTK Labs 1 through 6), and digital forensic investigations to analyze a forensic image file. You must find and bookmark (using FTK’s Bookmarking feature) a minimum of ten (10) items of interest within the forensic image. After bookmarking your items, you will generate an FTK Case Log Report

(as you did in FTK Lab 6) that includes your bookmarked items.

Deliverables:

1. FTK Case Log Report (containing your 10 bookmarked items)

2. 1 to 2-page summary that discusses the following:

a. What items of interest did you find within the forensic image?

b. What procedures did you follow to find and analyze the items of interest?

c. What Expert Opinions can you offer regarding the items of interest?