Lab 1: Applying the Daubert Standard to Forensic Evidence

Lab 1: Applying the Daubert Standard to Forensic Evidence

Purpose:

In this lab, you will act as a forensic specialist assisting the lead forensics investigator at the Cyber Crimes Division (CCD) for the Fremont Police Department. You will be given a hard drive image taken from a seized computer suspected of containing stolen credit card numbers. You will review the search warrant and complete the Chain of Custody form that accompanies the evidence drive. You will prepare the contents of the seized hard drive using a variety of forensic tools as evidence in accordance with the Daubert standard. You will use FTK Imager to create hashes for key evidence files. You will then validate the hash code using EnCase Imager and P2 Commander, two common forensic analysis tools.

Directions:

1. Go to jblearning.com (Links to an external site.)and find Lab 1: Applying the Daubert Standard to Forensic Evidence.

2. Upon completion of this lab, you are required to submit the following:

1. A Lab Report file in Microsoft Word or any document file including screen captures of the following steps:
   • Part 2 – Steps 17 and 23
   • Part 3- Step 14
   • Part 4 – Step 7
2. 043458.csv
3. yourname_Chain_of_Custody.pdf (use name muhaimin hasan)
4. The Lab Assessments file. Download and complete the worksheet: Lab 1 Assessments File.

3. To Submit: Click the “submit” button above.

Be sure to attach all required files to the assignment before clicking Submit. Your assignments are not completed until they are submitted. You must contact the instructor if you submit the wrong file, forget to attach a file, or have any other problems so that the instructor can reset the assignment attempt.

Grading:

This assignment is worth up to 50 points towards your final grade. Your submission will be evaluated using the following criteria:

1. All required screenshots are present and all lab directions were followed (up to 30 points with points deducted for any missing steps/screenshots).
2. All questions on the assessment sheet have been answered completely (meaning detailed answers, not “yes/no”) and the answers demonstrate a good understanding of relevant