In-Module Re-Assessment
This is the only time you will be offered reassessment for this assignment; if you miss this opportunity then you will not be able to improve your mark at a later stage.
To improve your mark from 35% to 50% you should do the following:-
In no more than 500 words; explain the different approaches that can be taken for the recovery of evidence from a laptop computer. Your short report should consider different evidence recovery techniques, and different tools to support those evidence recovery techniques.
Note: you should focus on evidence recovery (acquisition) not data recovery for data that has been accidentally deleted.
Hints: you should be talking about things such as manual, logical or physical acquisitions; and you should be talking about tools such as Cellebrite, EnCase or CAINE.
You have 500 words only. Answer the question directly, you do not need to include an introduction or conclusion.
You must hand this in no later than Friday 9th May.
Email a copy of it to [email protected]