Digital forensics the open way: A tabletop approach to common scenarios

[semioticrobotic]

Proposed chapter from Denise Ferebee, Carolyn Butler, Dipankar Dasgupta, Marcus Kelly:

Digital forensics is the process of collecting, processioning, preserving, analyzing, and presenting computer-related evidence in support of network vulnerability mitigation and/or criminal, fraud, counterintelligence, or law enforcement investigations.1 Teaching digital forensics concepts can be difficult, because it involves complex situational analysis and understanding (there is no standard format for analyzing a crime!). Learners need to be active participants in a situated learning environment. Digital forensics exercises require an activity approach through which learners explore and analyze a situation requiring the use of forensic tools specific to the component requiring analysis. To the greatest extent possible, this approach should be collaborative and adaptable to maximize its effectiveness. Therefore, in what follows, we share three versions of a digital forensics tabletop activity, each adapted for a different learning context and type of student. Each iteration involves the use of open source digital forensics tools.