Title: Major Summative Assessment Task (MSAT)
Course: IN 2005 Digital Forensics > Section: Module 8: Chapter 8 - Macintosh and Linux Boot Processes and File Systems

MSAT EXERCISE

Due xxxxxx

Create a proposal for a forensic lab.

1. The proposal assumes you are starting from scratch and have no equipment, training or tools.
2. In this scenario you can assume your role will not include live system analysis, however, you may plan to add live analysis capabilities in the future.

The following elements must be included:

  1. Minimum of one forensic workstation configured as you see fit to perform in any capacity you may encounter.  You must support your choice of components and operating systems with justification.
  2. Ability to physically acquire SATA, PATA, 2.5 PATA, CF, SD, Mini SD, Micro SD devices.
  3. A software toolkit with applications you feel will be necessary to perform imaging in the lab and in the field.  Support your choices with documentation justifying your inclusion of the tools you chose.  Include with each tool choice a description of that tools capabilities and uses.
  4. Temporary and long term storage solutions that would include backups for each. Include an explanation of what data needs to be backed up and why.
  5. A list of any other equipment or software you need and justification for that equipment.
  6. Training you will need and justification for that training.

Report rules:

  - You must show Web URL resources. (The Forensics Text Book nor Wikipedia may be used as resources)
  - Do Not Plagiarize (you will receive a “0” for your work if you break this rule)