Assignment two Marking Criteria ISYS6002-2022-T2Special Needs Assistance
| Criteria | Mark | Mark Break down |
Note to student |
| 1. Identification processes | 12 | ||
| a.Background information about your client business, vision, mission, goals | 4 | ||
| b. Explain your client smart environment ( systems, network, security operation, the IT and security operation team) | 4 | ||
| c. Analysed how the information assets are held, used, and collected where possible | 4 | ||
| 2. Task one | 12 | ||
| a..Background information about your client auditor (KPMG,Delloit, PWC or EY) | 4 | ||
| b. Comprehensively identified the relevant security audit information (Appendix audit questions) | 4 | ||
| c. Analysed audit findings | 4 | ||
| 3.Task two MITRE ATT&CK EXERCISE | 10 | ||
| a.Discussion of the Operations, Tactics, and Techniques used by GoldRekt to attack your client | 5 | ||
| b. ATT&CK Navigator spreadsheet | 5 | ||
| 4. Task three :Digital Forensics and Incident Response (DFIR) Analysis Exercise for an insider threat | 10 | Please refer to the week 5 Tutorial activities |
|
| Has the Denise Robinson account ever been used to logon to the computer? What is Denise Robinson’s email? | 1 | ||
| How many times has the jfriday account been used to logon to the computer? | 1 | ||
| How many user accounts are disabled? | 1 | ||
| Name two SID values that would suggest that an account was created automatically during the initial operating system installation? |
1 | ||
| The Key Properties pane provides a date and time as to when a user account last had its password changed. Is this true or false? | 1 | ||
| How many hives does the Windows Registry contain? | 1 | ||
| What is the name of the computer that you are investigating? | 1 | ||
| What time zone has this Windows computer been set to? | 1 | ||
| What is the benefit of being able to extract the serial numbers of previously connected USB devices? | 1 | ||
| How many mounted devices on this system have assigned drive letters? | 0.5 | ||
| What information is stored in the Enum folder? | 0.5 | ||
| 3. Professional Presentation and referencing | 6 | ||
| Use appropriate language and support the discussion with strong evidences | 2 | ||
| Referencing | 2 | ||
| professional report presentation | 2 | ||
| Total | 50 |