Computer Forensics - LAB

Questions Find any real-world cases where investigators used digital forensics to convict the criminal. Answer the following questions: 1. Give a brief description of the case. (4 marks) 2. What are the characteristics of the case? a) Motives (2 marks) financial gain politic ideological commercial personal revenge espionage "show-off" racism dissatisfaction ... please add the list if necessary b) Target (2 marks) government financial institution IT-related company Corporate educational institution ... please add the list if necessary c) Skill Levels (2 marks) elementary level (desktop user, web search, email) experienced user level (elementary plus daily workplace experience) intermediate level (experienced user, some programming and operating system expertise) high level (professional IT worker) hacker level (intensive study and experience) ... please add the list if necessary d) Type of Security Incident (2 marks) virus attack unauthorized access information theft / confidentiality loss attacks against system functionality denial of service attack information corruption ... please add the list if necessary e) Insider / Outsider (2 marks) While computer crime reports in the press support the public view that everyone is under threat from anonymous cyber-terrorists, computer security specialists continue to assert that up to 90% of computer-related crimes are committed by "insiders". The following categories may be used in your analysis: outsider (no known connection with the target) insider with special privilege (e.g. system administrator) insider with normal privilege (e.g. workplace user) ex-employee retaining privileges ... please add the list if necessary 3. What was the identified digital evidence in the case? Explain. (2 marks)