Describe your methods of handling the digital forensics evidence that you used in this exercise.

In this assignment, you will attempt to recover data that was deleted from your laptop or desktop computer.

Scenario:

You are a technician in the information technology (IT) department of an Internet startup. One of your colleagues recently downloaded three files onto his laptop—a .doc file, a .jpg file, and an .mp4 file—which he accidentally deleted. He now urgently needs these files to complete a time-sensitive task and has asked you to help him recover the lost data.

Tasks:

To recover the lost data:

  1. Click here to download the following files to your desktop:
  • AU_IST344_M3A2L1.doc
  • AU_IST344_M3A2L1.jpg
  • AU_IST344_M3A2L1.mp4

Visit http://download.cnet.com and search for “data recovery” software, indicating whether you are using a Windows or Mac computer. Review the list of data recovery software. Select the two programs you feel are the best; base your decision on any criteria of your choice, but consider those programs that have the largest number of downloads or the highest user reviews. Install both software programs onto your desktop or laptop computer. Make sure to not install additional software or add-ons packaged with the program. Delete all three of the files you downloaded to your desktop in the first step (AU_IST344_M3A2L1.doc, AU_IST344_M3A2L1.jpg, AU_IST344_M3A2L1.mp4); ensure that your Recycle Bin is empty and the files no longer exist on your computer. Open and run the first of the two data-recovery software programs; check to see which of the three files from this syllabus were recoverable. Open and run the second of the two data-recovery software programs; check to see which of the three files from this syllabus were recoverable. Write a 3- to 4-page reflection in which you address each of the tasks below:

  • Define and describe the digital forensics practices that you used to complete this exercise.
  • Describe your methods of handling the digital forensics evidence that you used in this exercise.
  • Explain why you chose the two data-recovery programs you selected.
  • Illustrate how you used the digital forensics tools you downloaded to locate, recover, and identify the three digital files.
  • Critique your success (or failure) when attempting to recover the three digital files.
  • Provide solutions for data recovery techniques and suggest tools to use.
  • Explain how you can apply this skill in the future.

Note: Your final product should be a 3- to 4-page Microsoft Word document, using four to six scholarly sources beyond your course textbook. Write in a clear, concise, and organized manner; demonstrate ethical scholarship in the accurate representation and attribution of sources (APA); and display accurate spelling, grammar, and punctuation

Type of paper Academic level Subject area
Number of pages Paper urgency Cost per page:
 Total: