Simple Digital Forensic Practical Activity and Applicable UK Legislation

Digital Forensic Lesson or Stand Alone Activity
This is a simplified digital forensics lesson or stand alone practical activity for students 16+ where they will investigate the fictional theft of student’s financial data.

Tailored support is offered by the author if you would like to customise it for your institution. Full instruction are inculded within the files to download.

A zip folder has been included in order to upload some specific files such as .7zip and .bat files, please extract them once downloaded.

Synopsis of the lesson:
The learners will be provided a digital folder which can be downloaded, from an internet source such as Teams or copied to a USB and distributed.
The learners are now left to experiment with the contents of the folder to identify who stole what data and when. They are challenged to find this information out and encouraged to record their findings.
Once, this activity ends, they will diverge slightly to participate in another task, identifying some common digital forensic legislation. This may help them during their mock trial. The learners will then with the teachers help review the evidence found and participate in a mock trial. The purpose being to have fun and try to identify how trials are conducted and is the evidence admissible or not. The learners in theory should find the suspect ‘Marc Newman’ responsible/guilty for the theft of bank details of students from Carlisle College’s database. He would be charged with a breach of the Computer Misuse Act 1990 and the College would be guilty of a breach of the Data Protection Act 2018 for failing to encrypt sensitive data.