Description Table 1 Challenge Rubric.png

Description

Table 1 Challenge Rubric.png

Table 1 Challenge Rubric.png

This challenge will be used as the challenge assessment tool for the Intro to Cyber Forensic Science course.

Rules & Suggestions

Students are free to use any tools or techniques they choose during their forensic analysis; however, the judges must be able to interpret and reproduce the results using publicly available means. You have already been pre-selected into groups for this exercise. Groups are not allowed communicate with other groups regarding their findings. Teams should start early as it takes a while to index the drives.

Scenario Description of Challenge

Security engineers running the data loss prevention program for The HiTeK Company believe they have encountered potential data exfiltration of sensitive information from its corporate network. They had incident respAcquisition_Notes_Computer2.E01.txt onders make forensic images of two related computers and capture network traffic. You are to analyze the evidence and confirm the validity of the security engineers’ statement. You are provided with two disk images, and a pcap file.

Data Download Link

To download the challenge data, you can visit this link: https://www.dropbox.com/sh/4llv4icmj27m3p1/AAD7m5b…Links to an external site.

Acquisition Notes can be downloaded from these two links:

Acquisition_Notes_Computer1.E01.txt

Acquisition_Notes_Computer2.E01.txt

Submission Format

Each submission is to:

Include the name of the students on the team.

Be provided in Adobe Acrobat PDF (without JavaScript).

Use one-inch margins.

Use 12-point font (Arial, Calibri, Cambria, Helvetica, or Times New Roman).

Use single or double-spaced lines.

Be written in English.

Submission Method

Submit this online on canvas the day of the presentation. Only pdf reports are accepted. Scoring Scoring will be calculated using the scheme described in Table 1.