Task 2: Digital Forensics ReportYou are working in a Digital Forensic Investigation
company, ABC Forensics (you can come up with your own company name if you are
not fan of this name) and investigating a possible intellectual property theft
by a new employee of Superior Bicycles, Inc. This employee, Tom Johnson, is the
cousin of Jim Shu, an employee who had been terminated. Bob Aspen is an
external contractor and investor who gets a strange e-mail from Terry Sadler
about Jim Shu's new project (shown in Figure 8-5 of the textbook on p. 350).
Bob forwards the e-mail to Chris Robinson (the president of Superior Bicycles)
to inquire about any special projects that might need capital investments.
Chris forwards the e-mail to the general counsel, Ralph Benson, asking him to
look into it. He also forwards it to Bob Swartz, asking him to have IT look for
any e-mails with attachments. After a little investigation, Bob Swartz forwards
an e-mail IT found to Chris Robinson (shown in Figure 8-6 of the textbook on p.
350).
Chris also found a USB drive on the desk Tom Johnson was
assigned to. Your task is to search for and determine whether the drive
contains any proprietary Superior Bicycles, Inc. data in the form of any
digital photograph and/or in any other form such as emails, text, spreadsheets
etc as an evidence. In particular, you may look for graphic files such as JPEG
on the USB drive hidden with different format. But during the investigation you
also look for other type of data as mentioned above. As a digital forensic
specialist, you do not pre-assume that you will (or will not) find what you are
looking for. However, you need to make sure that you conduct comprehensive
investigation before reaching to any conclusions.
Note for the USB drive image, you need to download the
"C08InChp.exe" file from the download section of Chapter 8 on the student
companion site of the textbook (Nelson, Phillips, & Steuart, 6/e, 2019).(20%) (20
marks)