You will be supplied with some potential evidence related to a case. The evidence will be imaged as if taken by an officer from a scene of crime.
The digital evidence has been taken from the home of a person suspected by HM Revenue and Customs of importing and selling counterfeit goods. You must investigate the data to find out whether the contents incriminate the home owner and anyone else who might have been involved in this criminal organisation.
You are to write a detailed report targeted at senior officers who must make the decision whether to take this further. They are not particularly computer literate, so it must be explained in clear terms – including any possible negative evidence that might be used by a defence team. This report must be no more than 8 pages of no less than 9 point.
A second report (up to 12 pages) must explain your process of discovery ie the methodology in order to teach any potential team members how to carry out an investigation. It is not sufficient to simply indicate which files were found and where. This report is aimed at a recent computing graduate, who understands computer forensic techniques but has not yet built up a methodology for investigation.