Jillian Brown

Develop realistic, high quality case material for computer forensic investigations Suitably complex primary data Apply theoretical aspects of research to the resolution of computer forensics cases 4 weeks Setting up realistic, high quality forensic scenarios is a difficult problem (Brueckner, S 2008)

Time Realistic Reproducibility Without reproducibility there can be no objective evaluation of student work (Garfinkel, 2009) Sufficient data Students Copyright & Privacy Intellectual Property Duty of care

Time Realistic Reproducibility Without reproducibility there can be no objective evaluation of student work (Garfinkel, 2009) Sufficient data Students Copyright & Privacy Intellectual Property Duty of care

NTFS file system running Windows XP Pro Research, Planning & Testing Five user accounts Four scenarios Creation of cases Final Year Project

Many problems to consider Need careful consideration, planning and plenty of time Better investigator Sharing case studies or creating a single database of case studies

Brueckner, S et al (2008) Automated Computer Forensics Training in a Virtualized Environment, Digital Investigation, Vol 5, Supp 1, September 2008, pp s105-s111. Garfinkel, S et al (2009) Bringing Science to Digital Forensics with Standardised Forensic Corpora, Digital Investigation, Vol 6, Supp 1, September 2009, pp s2-s11.