Assignment title: Information


This assessment item relates to the course learning outcome 1 to 6 as stated on page 1 of the course profile. Enabling objectives 1. Apply the digital forensics methodologies. 2. Write an analysis of a case study. 3. Appraising the legal issues involved in a forensic investigation. 4. Prepare an outline of a professional digital forensic plan. Instructions This assessment has two parts. Part A is a class presentation with 30% weight of this assessment. Part A is due in week 6. Part B is a formal report with 70% weight of this assessment. Part B is due in week 10. Read the given case and complete the required tasks specified for Part A and Part B. The Case Background: York RE Pty Ltd (YRE) was established in 1997 as a small engineering business. The company's main office is situated in Brisbane with other branch offices located in Sydney, Melbourne and Perth. YRE saw significant expansion with its investments in the Asia Pacific as it tracked the economic growth in the region. Despite the 2008 global economic downturn and a reduction of its workforce, YRE had continued to grow as a multinational company, albeit less rapidly. However, in the past couple of years, YRE had experienced slower growth because of the intense global competition. YRE had invested heavily in information technology for supporting its domestic business operations and achieving competitive advantages. Major investments were made by the company for its Australian operations in 2006 but the management had lost focus in updating the networks and application infrastructure that supports the business operation in recent years. The servers and workstations throughout its Australian offices are Windows-based. Firewalls and intrusion detection and prevention systems that have been installed by a contractor are in place but they are rarely monitored or upgraded. The Australian IT staff are responsible for configuring and managing the domestic computer and network systems. Earlier this year, the Australian offices experienced a significant slowdown in their network services. There were also reports of spam originating from YRE about the same time. It was identified that some servers had been infected by malware. The IT support team had responded quickly to restore the network services. Fortunately, key databases were not believed to be affected as they were on a different internal network. It was unclear how YRE network was infected in this incident. Last week, YRE's domestic public webserver was again discovered to be compromised. COIT12201, ECrime and Digital Forensics – T2, 2015 Assessment 2 Page: 2 / 4 Part A: Presentation (9 marks) You are a member of the IT auditing staff and your supervisor, Luci Patel who is the regional director, has instructed you to give a presentation to the local IT team and selected managers. The purpose of your presentation is to inform the invited staff on the nature and activity of digital forensics. Specifically, explain  what Digital Forensic is, its activities and functions,  the difference between a corporate investigation and a public investigation,  justify the use of the digital forensic methodology and approach for corporate investigation,  the need to correctly preserve the digital evidence. Describe typical requirements, procedures and processes in collecting digital evidence. Suggestions for your presentation. For classroom evaluation purposes, you should use no more than 16 slides in your presentation. The presentation is estimated to be about ten to twelve minutes long. You are expected to be focused and clear in your presentation. Be prepared to answer relevant questions that your audience may ask after your presentation. Your presentation documents should be uploaded online to Moodle before your classroom presentation. The title slide should contain the course code and name, the academic term and year, the assessment number and description, the week and presentation date, the names of the presenters/ group members and ID numbers (indicate the team leader if applicable), the campus and teaching staff name. Check with your campus teaching staff on the administration of this activity (presentation signup sheet, day/time, etc.).