Homework answers / question archive / IMDCYB303 Cyber Forensics and Intrusion Management What is required? An individual submission of 3,000 words plus bibliography, references and technical appendices The report should address the brief given at the end of this assignment brief Appendices as appropriate Fully Harvard refenced Learning outcomes to be assessed: You are expected to demonstrate that you have achieved all the module’s learning outcomes: Demonstrate the ability to recognise anomalies, utilising their analysis and synthesis skills to infer and correlate from information gathered through multiple monitoring and logging sources

IMDCYB303 Cyber Forensics and Intrusion Management What is required? An individual submission of 3,000 words plus bibliography, references and technical appendices The report should address the brief given at the end of this assignment brief Appendices as appropriate Fully Harvard refenced Learning outcomes to be assessed: You are expected to demonstrate that you have achieved all the module’s learning outcomes: Demonstrate the ability to recognise anomalies, utilising their analysis and synthesis skills to infer and correlate from information gathered through multiple monitoring and logging sources

Computer Science

Share With

---

IMDCYB303 Cyber Forensics and Intrusion Management

What is required?

• An individual submission of 3,000 words plus bibliography, references and technical appendices
• The report should address the brief given at the end of this assignment brief
• Appendices as appropriate
• Fully Harvard refenced

Learning outcomes to be assessed:

You are expected to demonstrate that you have achieved all the module’s learning outcomes:

• Demonstrate the ability to recognise anomalies, utilising their analysis and synthesis skills to infer and correlate from information gathered through multiple monitoring and logging sources.
• Demonstrate the ability to effectively manage an incident response, including effective communication with internal teams and external authorities, and the securing and preservation of evidence.
• Undertake a cyber-investigation utilising appropriate cyber forensics techniques under the appropriate legal and ethical framework.

It is therefore necessary for you to seek opportunities to show learning achievement of those objectives within the boundaries of the assignment.  This need be neither sequential nor equal, that will be determined by the nature of your assignment and due allowance will be made.

Assessment & Grading Criteria:

See overleaf

Assessment Brief.

See the attached brief.

Assessment Brief

Task: Cybercrime Investigation (3000 words)

The police seized a Windows 10 machine suspected of involvement in a counterfeit money case. After the initial hearing the defence analysed the system and, having admitted the presence of artefacts on the system, claimed that a Trojan, possibly located on a virtual machine, was responsible for said artefacts.

You are working as an expert witness for the Crown Prosecution Service (CPS). The CPS would like you to analyses the virtual machine in depth, in particular for the presence and impact of any possible malware and also for the possible impact of other applications / tools. You have therefore been given the following task:

"Investigate the VM system for possible traces of malware, its efficacy, and any other software tools or applications that may impact upon the case."

Students to produce:

An expert witness report of their findings, no more than 3000 words in length.

Your report must be in the style of an expert witness report and contain the following sections (Adapted from Bond Solon, Excellence in Written Evidence):

• Introduction

• Author
• Synopsis
• Purpose
• Summary of conclusions
• Parties involved
• Technical terms and explanations
• Statements/documents relied on
• Disclaimer

• Issues

• Statement of instructions
• Purpose of report
• Issues and key questions

• Facts

• Facts obtained by author
• Assumed facts
• Facts in documents
• Facts obtained by others

• Opinions/Recommendations/Advice

• Appendices

• Knowledge/training/experience of report author
• Experience of others assisting in report
• Statement of methodology
• List of documents considered
• Details of other literature relied upon
• Photos, drawings, schedules, graphs, charts
• Chronology
• Glossary of technical terms

Notes sheet

Any detailed information to support the report is to be included in appendices as appropriate.

Expected deliverables: A report: 3,000 words (not including, contents, references, and appendices).

Your report must:

• Use font size 11 or 12. 
• The paragraph alignment must be justified. 
• The font can be Arial, Times New Roman or Calibri.
• You must use single line spacing.  
• Each section and sub-section heading should be numbered (1.0, 2.1, 3.0, 4.4. etc).
• Each figure or table should be labelled according to the primary section (1.0, 2.0, 3.0 etc) not the subsection.  For example, Table 2.1 is the first table in section 2, Table 4.6 is the sixth table in section 4, Figure 3.7 is the seventh figure in Section 3.  
• The report should be fully Harvard referenced.
• You must spellcheck your report before submission. 
• You must word-count your report before submission.