This project develops your skills in extracting, analyzing, and recovering mobile device data using forensic tools.

College of Computing and Informatics

Project
Deadline: Wednesday 23/04/2025 @
23:59
[Total Mark is 14]
Student Details:

CRN:

Name:
Name:
Name:
Name:
Instructions:

ID:
ID:
ID:
ID:

• You must submit two separate copies (one Word file and one PDF file) using the Assignment Template on
Blackboard via the allocated folder. These files must not be in compressed format.

• It is your responsibility to check and make sure that you have uploaded both the correct files.
• Zero mark will be given if you try to bypass the SafeAssign (e.g. misspell words, remove spaces between
words, hide characters, use different character sets, convert text into image or languages other than English
or any kind of manipulation).

• Email submission will not be accepted.
• You are advised to make your work clear and well-presented. This includes filling your information on the cover
page.

• You must use this template, failing which will result in zero mark.
• You MUST show all your work, and text must not be converted into an image, unless specified otherwise by
the question.

• Late submission will result in ZERO mark.
• The work should be your own, copying from students or other resources will result in ZERO mark.
• Use Times New Roman font for all your answers.

Restricted – ‫مقيد‬

Description and Instructions

Pg. 01

Learning Outcome(s):
CLO1: Describe the
common processes
and procedures used
to conduct criminal
and noncriminal
investigations of
activities involving
evidence with digital
media, including the
ethical guidelines that
apply to these
processes.

Instructions
Project General Instructions
This project enables you to integrate the covered knowledge and skills in this course.
This project aims to equip you with the crucial skills of extracting and analyzing digital
evidence from mobile device. You will explore the capabilities of forensic analysis
tools and apply them to investigate, extract and analyze data and recover deleted data
from mobile device.
•

Total Marks = 14

CLO2: Describe how

•

Group Size = 2 to 3 members.

to maintain the chain

•

Submit all files: Project Report (Word and PDF) on blackboard before 23rd April

of evidence in
criminal
investigations

2025.
•

One of the group members (group leader) should submit all the files such as
Project Report on blackboard. Marks will be given based on your submission

CLO3: Examine the
principles that
underlie the forensic

and quality of the contents.
•

criteria mentioned in the Project Report Template File.

investigation process
and apply the

•

required tools.

Each group must come up with a unique solution for the project based on the below
description.

•

Restricted – ‫مقيد‬

Project Report: Each Project Report will be evaluated according to the marking

Marks will be given based on your submission and quality of the contents.

Description and Instructions

Pg. 01
Learning Outcome(s):
CLO1: Describe the
common processes
and procedures used
to conduct criminal
and noncriminal
investigations of
activities involving
evidence with digital
media, including the
ethical guidelines that
apply to these
processes.

Project Title: Mobile Forensics
Case Description:
Retailer company named “ABC” suspects that one of staff member has leaked
confidential documents through unauthorized communication apps using mobile
device. The Security department of the company has flagged suspicious activities.
These activities were unauthorized app installs and file transfer on a simulated Android
device.
The company hired you as a forensic investigator to conduct an investigation on mobile
device. Your mission is to investigate the employee’s company-issued Android phone

CLO2: Describe how
to maintain the chain
of evidence in

for evidence of data exfiltration and unauthorized communications.
Focus: Extracting and analyzing data from mobile devices.

criminal
investigations

Tools: you use one of the following: MOBILedi , Autopsy, Andriller, Maltego

CLO3: Examine the

Deliverables: A report outlining the extraction process, the tools used, and the

principles that
underlie the forensic
investigation process
and apply the
required tools.

Restricted – ‫مقيد‬

recovered data.

Description and Instructions

Pg. 01
Learning Outcome(s):
CLO1: Describe the
common processes
and procedures used
to conduct criminal
and noncriminal
investigations of
activities involving
evidence with digital
media, including the
ethical guidelines that
apply to these
processes.
CLO2: Describe how

Project Task:

•

mark).
•

Visit the provided websites:

•

–
–
–
Explore these online tools and understand their functionalities for data extraction
from mobile device.

•

to maintain the chain
of evidence in
criminal

1- Planning and Familiarize Yourself with Online Analysis Tools used for
Mobile device
Provide the investigation objectives and plan that you will follow in the project (0.5

•

Demonstrate understanding and discuss the functionalities offered by the online
analysis tools for mobile device (1 mark).
Discuss legal and ethical considerations that you have to follow for handling
mobile forensic evidence (0.5 mark)

investigations

2- Conduct Your Digital Evidence Investigation:
CLO3: Examine the
principles that
underlie the forensic
investigation process
and apply the
required tools.

Restricted – ‫مقيد‬

a. Document/PDF Files (3 Marks):
i. Select any three document or PDF files from your mobile
device.
ii. Utilize one or more of the online analysis tools to examine
each file.
iii. Document your findings in a clear and concise report,
including details like:
1. File name and format
2. Creation date and time
3. Author information (if available)
4. Any other relevant metadata revealed by the tools
5. Screenshots of the analysis process
b. Image Files (3 Marks):
i. Select any three image files (e.g., JPG, PNG) from your
mobile device.
ii. Use the online tools to analyze the metadata of each image
file.

Description and Instructions

Pg. 01
Learning Outcome(s):
CLO1: Describe the
common processes
and procedures used
to conduct criminal
and noncriminal
investigations of
activities involving
evidence with digital
media, including the
ethical guidelines that
apply to these
processes.
CLO2: Describe how
to maintain the chain
of evidence in
criminal
investigations
CLO3: Examine the
principles that
underlie the forensic
investigation process
and apply the
required tools.

iii. Create a report documenting your findings, similar to the
document/PDF section, highlighting:
1. Image format and size
2. Date and time of capture (if available)
3. Camera model information (if embedded)
4. GPS location data (if present)
5. Screenshots of the analysis process
c. Social media/communication apps (4.5 Marks):
i. Choose any three social media you visit regularly.
ii. Utilize the online tools to investigate the metadata associated
with those social media.
iii. In your report, record your findings, including details like:
1. Social media name
2. User information (username and display name)
3. Account creation date (if available)
4. Linked email and phone number
5. Deleted messages
6. Attachment and shared links in messages
7. Any other relevant technical details revealed by the
tools
8. Screenshots of the analysis process
3- Reporting:
• Write a report that include the following:
1. Provide project aims and followed plan
2. Description of the incident and investigation process
3. Provide tools used.
4. Provide details of the evidence collected and
analyzed.
Evaluation Criteria:

Restricted – ‫مقيد‬

•

Comprehension of investigation objectives, Analysis Tools and ethical
considerations (2 Mark)

•

Thoroughness of Investigation (10.5 Marks): Conduct a detailed examination of
the chosen files and social media, extracting all relevant metadata possible.

•

Screenshots (1.5 Marks): Including screenshots as evidence of your analysis
process can enhance your report mandatory).

Description and Instructions

Pg. 01
Learning Outcome(s):
CLO1: Describe the
common processes
and procedures used
to conduct criminal
and noncriminal
investigations of
activities involving
evidence with digital
media, including the
ethical guidelines that
apply to these
processes.
CLO2: Describe how
to maintain the chain
of evidence in
criminal
investigations
CLO3: Examine the
principles that
underlie the forensic
investigation process
and apply the
required tools.

Restricted – ‫مقيد‬

•

Reporting: Present your findings in a clear, concise, and well-organized slides
that is easy to understand.

Purchase answer to see full
attachment