Assignment Code: MSEI-027/TMA/2023

Course Code: MSEI-027

Assignment Name: Digital Forensics

Year: 2023

Verification Status: Verified by Professor

There are two questions in this assignment. Answer all the questions. You may use illustrations and diagrams to enhance your explanations.

Question 1: Explain the various types of identity theft and data theft. (10 Marks)

Ans) Thefts of personal information and identities, often known as data theft, are severe offences that can do tremendous damage to both persons and businesses. The following is a list of the numerous types of data theft and identity theft:

1.  Financial Identity Theft: When somebody steals your personal information and then uses it to commit fraud or other financial crimes, this is what is known as identity theft. Personal information includes things like your name, Social Security number, and credit card information.

2. Medical Identity Theft: When someone steals your medical information and then uses it to seek medical treatment or prescription drugs, this is known as medical identity theft. Examples of stolen medical information include your health insurance number or medical history.

3. Criminal Identity Theft: When another person uses your identity to perform a crime, such as identity fraud or theft, this is known as "identity theft."

4. Synthetic Identity Theft: When someone commits fraud or other crimes using a new identity that they have created by combining actual and fictitious information, such as by using a legitimate Social Security number but a phoney name, this is known as "persona non grata."

5. Data Theft: This takes place when sensitive information, such as your login credentials, credit card information, or personal data, is taken from a website or database that you use and used by someone else.

6. Intellectual Property Theft: This takes place when someone steals your intellectual property, such as your patents, trademarks, or copyrights, and utilises it for their own financial advantage. Some examples of intellectual property include patents, trademarks, and copyrights.

7. Cyber Espionage: This happens when governments from other countries or other groups steal secret information from businesses, governments, or other institutions in order to use it for their own strategic reasons.

8. Insider Threats: This takes place when workers or contractors working for a business steal sensitive information for the purpose of making personal gains or selling it to the organization's rivals.

Question 2: What are the important points to be considered for E-mail investigation. (10 Marks)

Ans) Email investigations can be difficult, and they call for a methodology that is both methodical and comprehensive in order to guarantee that all pertinent material is obtained and examined. When conducting investigations using emails, the following are some crucial considerations to keep in mind:

Preserve the Evidence

It is essential to maintain the integrity of the evidence connected to the email in question. This involves maintaining the email itself, in addition to any metadata associated with it, such as the information contained in the email header.

Identify the Sender and Recipients

Identify the person who sent the email as well as all of the recipients. This may include tracking the email all the way back to its original source and locating any communications that were forwarded or replied to.

Analyze the Content

Conduct research into the contents of the email to evaluate whether or not it contains any pertinent evidence or information. This may entail examining the tone of the message, the language used in the message, as well as any files or links that were included in the email.

Examine the Attachments and Links

Examine any attachments or links that were provided in the email to see whether or not they contain any malware, viruses, or other forms of potentially harmful content.

Review Email Logs

Check the email logs to see what time and date the email was sent, as well as any other information that may be pertinent to the email transmission.

Interview Witnesses

Interrogate any potential witnesses who could know something about the email. This includes the sender, the recipients, and anyone else who might have been copied on the email.

Follow Applicable Laws and Regulations

Make sure that any and all email investigations are carried out in accordance with the appropriate laws and regulations, particularly those pertaining to privacy and data protection.

Document the Investigation

It is important to keep a record of all parts of the inquiry into the email, including the actions followed, the evidence acquired, and the findings of the investigation.