Unit of Competency Mapping – Information for Teachers/Assessors – Information for Learners
DEFFOR010 Mapping and Delivery Guide
Produce an electronic media image for forensic purposes
Version 1.0
Issue Date: May 2024
Qualification | - |
Unit of Competency | DEFFOR010 - Produce an electronic media image for forensic purposes |
---|---|---|---|
Description | |||
Employability Skills | |||
Learning Outcomes and Application | This unit describes the skills required to employ a range of electronic media forensic methodologies to produce an image of a storage device. Storage devices may include hard disk drives, solid state drives, read-only memory (ROM), random-access memory (RAM), flash drives, tape drives, basic input/output system (BIOS) and USBs. Common objectives may include keyword searches, files recovery, including deleted files, extraction of registry information and metadata. Mobile devices such as mobile phones may afford additional information, including location, but require the use of specific methodologies.This unit applies to those working in the gathering and analysis of electronic information.The skills and knowledge described in this unit must be applied within the legislative, regulatory and policy environment in which they are carried out. Organisational policies and procedures must be consulted and adhered to, particularly those relating to WHS and the search and seizure of electronic evidence.Those undertaking this unit would work independently, with minimum of supervision, while performing complex tasks, including making complex judgements. They would use discretion and judgement and take responsibility for the quality of their outputs.No licensing, legislative or certification requirements apply to this unit at the time of publication. | ||
Duration and Setting | X weeks, nominally xx hours, delivered in a classroom/online/blended learning setting. Competency should be assessed in an actual workplace or in a simulated environment, with access to equipment and infrastructure appropriate to the outcome. Competency should be demonstrated over time to ensure the candidate is assessed across a variety of situations, with access to electronic devices with content suitable for forensic extraction including mobile devices, computers or communications equipment. Assessors must satisfy the NVR/AQTF mandatory competency requirements for assessors. |
||
Prerequisites/co-requisites | |||
Competency Field | Electronic Forensics |
Development and validation strategy and guide for assessors and learners | Student Learning Resources | Handouts Activities |
Slides PPT |
Assessment 1 | Assessment 2 | Assessment 3 | Assessment 4 | |
---|---|---|---|---|---|---|---|---|
Elements of Competency | Performance Criteria | |||||||
Element: Determine job requirements |
| |||||||
Element: Image storage device |
| |||||||
Element: Collect and package electronic evidence |
| |||||||
Element: Determine job requirements |
| |||||||
Element: Image storage device |
| |||||||
Element: Collect and package electronic evidence |
|