Digital Forensics Analysis
Start Here

This project will provide an introduction to digital forensic analysis.

Digital forensic analysis is used to review and investigate data collected through digital communications and computer networks. The National Institute for Standards and Technology (NIST) has defined four fundamental phases for forensic analysis: collection, examination, analysis, and reporting. You will learn more about these concepts as you navigate throughout the steps of this project and read the literature and links found in each step.

There are four steps that will lead you through this project. Begin with Step 1: “Methodology. The deliverables for this project are as follows:

Competencies

Your work will be evaluated using the competencies listed below.

• 5.3: Uses defensive measures and information collected from a variety of sources to identify, analyze, and report events that occur or might occur within the network in order to protect the information, information systems, and networks from threats.
• 8.6: Provides professional preparation for computer digital forensics, investigation of crime, and preservation of digital evidence in criminal and civil investigations and information security incident response.
• 8.7: Provide theoretical basis and practical assistance for all aspects of digital investigation and the use of computer evidence in forensics and law enforcement.
• Project 5: Digital Forensics Analysis
  1. digital forensics methodology
  2. the importance of using forensic tools to collect and analyze evidence (e.g., FTK Imager and EnCase)
  3. hashing in the context of digital forensics
  4. How do you ensure that the evidence collected has not been tampered with (i.e., after collection)? Why and how is this important to prove in court?
  5. The deliverables for this project are as follows:
  6. Digital Forensics Research Paper: This should be a five-page double-spaced Word document with citations in APA format. The page count does not include diagrams or tables.
  7. Check Your Evaluation Criteria
     Before you submit your assignment, review the competencies below. A good practice would be to use each competency as a self-check to confirm you have incorporated all of them. 
  • 5.3: Uses defensive measures and information collected from a variety of sources to identify, analyze, and report events that occur or might occur within the network in order to protect the information, information systems, and networks from threats.
  • 8.6: Provides professional preparation for computer digital forensics, investigation of crime, and preservation of digital evidence in criminal and civil investigations and information security incident response.
  • 8.7: Provide theoretical basis and practical assistance for all aspects of digital investigation and the use of computer evidence in forensics and law enforcement.