Puzzle P.I. - An Introduction To Cyber Forensics

Puzzle P.I.

Activity

Small Pieces Make The Bigger

Picture…

Contents

• Cyber Forensics In a Nutshell

– Definition

– Phases/Stages in Cyber Forensics

Investigation

Contents (continued)

• Puzzle P.I. Activity - Unlocked

and Explained

– A game that simulates the

phases/stages in Cyber Forensics

Investigation

What is Cyber Forensics?

• ​Cyber forensics is a bit like putting together a jigsaw puzzle.

• Imagine that someone has taken a jigsaw puzzle, mixed up all the pieces, and hidden some of them.

What is Cyber Forensics? (continued)

• Your job is to find those missing pieces and figure out how they all fit together to reveal the whole picture.

• In cyber forensics, the "puzzle pieces" are like digital clues found on computers, smartphones, and the internet.

What is Cyber Forensics? (continued)

• These clues might be files, messages, or even hidden information.

• Cyber forensics experts use special tools and techniques to collect and analyze these pieces, just like you would in a jigsaw puzzle.

What is Cyber Forensics? (continued)

• By putting them together in the right way, they can uncover the full story, like who did something wrong or how a cybercrime happened.

• So, cyber forensics is like being a digital detective who solves high-tech jigsaw puzzles to uncover the truth in the digital world.

Puzzle P.I. Activity - Go through the phases of cyber forensics!

• Computer Forensics involves the:

– preservation,
– identification,
– extraction,
– documentation, and
– interpretation

of computer media as evidence in a court of law...

Puzzle P.I. Activity - Go through the phases of cyber forensics!

Preservation:

• This is like taking a snapshot of the digital crime scene.

• It involves making sure nothing changes or gets lost in the computer or device that might have evidence.

• It's similar to preserving a crime scene in the real world.

Puzzle P.I. Activity - Go through the phases of cyber forensics!

Preservation:

An actual evidence bag used in cyber forensics.

​'Preserving' puzzle pieces in a sandwich bag.

Puzzle P.I. Activity - Go through the phases of cyber forensics!

• Identification:

• Think of this as finding clues in the digital world.

• It's about figuring out what's important and might

  help solve a cybercrime.

Puzzle P.I. Activity - Go through the phases of cyber forensics!

• Identification (continued):

• Just like a detective identifying important pieces

  of evidence at a crime scene.

​The identification stage requires good soft skills and experience!

Puzzle P.I. Activity - Go through the phases of cyber forensics!

• Extraction:

​In this stage, similar to you finding the correct puzzle piece, it's taking out the information you need from a computer or device.

Puzzle P.I. Activity - Go through the phases of cyber forensics!

• Documentation and interpretation:

• Where investigators carefully write down everything they find during the investigation,

• and put together all the pieces of the puzzle to understand what happened.

• Where investigators analyze the information to draw conclusions, just like a detective solving a mystery.

​Thank you for taking part in the Puzzle P.I. activity! Hope you enjoyed it!