1) Assignment 1  ( 2 Pages )  Post-Assessment: Mr. Fahad Naseem, and Mr. Ronald Joseph FBI Agent.  Mr. Fahad Naseem was arrested in connection with the kidnapping and killing of journalist Daniel Pearl and admitted sending ransom e-mails using his Laptop. The laptop and handwritten versions of the e-mails were found in his possession.  On the Contrary-A, Naseem later retracted his confession and the defense attorney asserted that logs from Mr. Naseem's Internet Service Provider (ISP) indicated that Mr. Naseem's account was not active and connected to the Internet at the time the e-mails were sent.  On the Contrary-B Naseem's defense attorney claimed that the compromised Laptop produced in court had a different serial number from the one that was initially recorded in police records; hence, documentation relating to the computer and evidence in the case was inconsistent.  On the Contrary-C Documentation presented in court indicated that the Federal Bureau of Investigation (FBI) agent, Mr. Ronald Joseph examined Mr. Naseem's Laptop between February 4 and 7, 2002. In contrast, documents indicated that the Laptop was not seized from Mr. Naseem until February 11, 2002, and  the court denied the appeal, including the following explanation. On the Contrary-D The lead investigator Mr. Shaikh Naeem recovered the Laptop labeled (connection No. 66) retrieved from the accused, Mr. Fahad Naseem, on November 2, 2002, was provided to Mr. Ronald Joseph, FBI agent, who examined, conducted the forensic investigation, formulated his report, and conveyed evidence to the Consulate General of the United States of America.  The report's content asserted that the Black Soft Computer came with "Proworld" written on the exterior of the Laptop, and upon opening the case, a Dell Latitude Cpi laptop was discovered.  The Laptop was identified in the report produced by this witness to be of model PPL with Serial number ZH942 located inside the Laptop as an IBM travel star hard driver [ sic ], confirmed to have been removed from the Laptop. During examination, the label on the hard drive was identified as a system with 4.3 GB storage capacity, and serial number OKLA24302 on the outside of the laptop.   After examining Exhibits, Mushernama who recovered the Laptop asserted that without a doubt whatever, the compromised Laptop is the same equipment that was seized from the accused, Mr. Fahad Naseem on November 2, 2002.  On the Contrary-E The forensic investigation report confirmed that the same Laptop was recovered on April 2, 2002 by the defense team. Availability of the Laptop at the American Consulate on April 2, 2002 is not unnatural and impossible because Marianne Pearl filed a complaint with the police on April 2, 2002, hours when the case was in the at the hands of the Investigating Agency. Questions 1. As an Aspirant and Hopeful Digital Forensic Investigator: 1:1. Submit concluding evidence to the public and the court substantiating that Mr.

1. 1) Assignment 1 ( 2 Pages )
Post-Assessment:
Mr. Fahad Naseem, and Mr. Ronald Joseph FBI Agent.
Mr. Fahad Naseem was arrested in connection with the
kidnapping and killing of journalist Daniel Pearl and admitted
sending ransom e-mails using his Laptop. The laptop and
handwritten versions of the e-mails were found in his
possession.
On the Contrary-A,
Naseem later retracted his confession and the defense attorney
asserted that logs from Mr. Naseem's Internet Service Provider
(ISP) indicated that Mr. Naseem's account was not active and
connected to the Internet at the time the e-mails were sent.
On the Contrary-B
Naseem's defense attorney claimed that the compromised
Laptop produced in court had a different serial number from the
one that was initially recorded in police records; hence,
documentation relating to the computer and evidence in the case
was inconsistent.
On the Contrary-C
Documentation presented in court indicated that the Federal
Bureau of Investigation (FBI) agent, Mr. Ronald Joseph

2. examined Mr. Naseem's Laptop between February 4 and 7,
2002. In contrast, documents indicated that the Laptop was not
seized from Mr. Naseem until February 11, 2002, and
the court denied the appeal, including the following
explanation.
On the Contrary-D
The lead investigator Mr. Shaikh Naeem recovered the Laptop
labeled (connection No. 66) retrieved from the accused, Mr.
Fahad Naseem, on November 2, 2002, was provided to Mr.
Ronald Joseph, FBI agent, who examined, conducted the
forensic investigation, formulated his report, and conveyed
evidence to the Consulate General of the United States of
America.
The report's content asserted that the Black Soft Computer came
with "Proworld" written on the exterior of the Laptop, and upon
opening the case, a Dell Latitude Cpi laptop was discovered.
The Laptop was identified in the report produced by this
witness to be of model PPL with Serial number ZH942 located
inside the Laptop as an IBM travel star hard driver [
sic
], confirmed to have been removed from the Laptop.
During examination, the label on the hard drive was identified
as a system with 4.3 GB storage capacity, and serial number
OKLA24302 on the outside of the laptop.
After examining Exhibits, Mushernama who recovered the
Laptop asserted that without a doubt whatever, the compromised
Laptop is the same equipment that was seized from the accused,

3. Mr. Fahad Naseem on November 2, 2002.
On the Contrary-E
The forensic investigation report confirmed that the same
Laptop was recovered on April 2, 2002 by the defense team.
Availability of the Laptop at the American Consulate on April
2, 2002 is not unnatural and impossible because Marianne Pearl
filed a complaint with the police on April 2, 2002, hours when
the case was in the at the hands of the Investigating Agency.
Questions 1. As an Aspirant and Hopeful Digital Forensic
Investigator:
1:1. Submit concluding evidence to the public and the court
substantiating that Mr. Fahad Naseem is guilty of kidnapping
and killing Mr. Daniel Pearl, the journalist.
1:2. Submit concluding evidence to the public and the court
demonstrating that Mr. Ronald Joseph examined Mr. Naseem's
Laptop between February 4 and 7, 2002, whereas documents
indicated that the Laptop was not seized from Mr. Naseem until
February 11, 2002.
1:3. Submit concluding evidence to the public and the court
attesting that Mr. Naseem's Laptop's availability at the
American Consulate on April 2, 2002, is unnatural and
unrealistic occurrences.
Academic Integrity/Plagiarism
At a Christian liberal arts university committed to the pursuit of
truth and understanding, any act of academic dishonesty is
especially distressing and cannot be tolerated. In general,
academic dishonesty involves the abuse and misuse of

4. information or people to gain an undeserved academic
advantage or evaluation. The common forms of academic
dishonesty include:
Cheating – using deception in the taking of tests or the
preparation of written work, using unauthorized materials,
copying another person’s work with or without consent, or
assisting another in such activities.
Lying – falsifying, fabricating, or forging information in either
written, spoken, or video presentations.
Plagiarism—using the published writings, data, interpretations,
or ideas of another without proper documentation
Plagiarism includes copying and pasting material from the
internet into assignments without properly citing the source of
the material.
Episodes of academic dishonesty are reported to the Vice
President for Academic Affairs. The potential penalty for
academic dishonesty includes a failing grade on an assignment,
a failing grade for the entire course, or charges against the
student with the appropriate disciplinary body.
Reference
Casey, E (2011). Digital Evidence and Computer Crime:
Forensic Science, Computers and the Internet, Elsevier.
2 ) Assignment 2 ( 2 Pages )

5. Many people think of the Internet as separate from the physical
world. This is simply not the case--crime on the Internet is
closely tied to crime in the physical world. There are a couple
of reasons for this cautionary note. A crime on the Internet
usually reflects a crime in the physical world, with human
perpetrators. and victims and should be treated with the same
gravity. To neglect the very real and direct link between people
and the online activities that involve them limits one's ability to
investigate and understand crimes with an online component.
Students think about the impact of auction and check fraud in
this modern era of digital shopping. This about how a
combination of evidence from the virtual and physical worlds is
used to apprehend a criminal.
Case Study
Case Example inspired by a case in (Casey, 2011)
A buyer on Amazon complained to police that he sent payment
to a seller but received no merchandise. The seller requested
that the buyer also send a cashier’s check for shipping and
additional costs. Over a period of weeks, several dozen similar
reports were made to the Internet Fraud Complaint Center
against the same seller. To hide his identity, the seller used a
Gmail account for online communications and several mail
drops to receive checks. Logs obtained from Gmail revealed that
the seller was accessing the Internet through a subsidiary of
AT&T. When served with a subpoena, AT&T disclosed the
suspect's Google account and associated address, credit card,
and telephone numbers. Investigators also obtained information
from the suspect's bank with a subpoena to determine that the
cashier's checks from the buyers had been deposited into the
suspect's bank account. A subpoena to Amazon for customer
order history and complaints and supporting evidence from each
of the buyers helped corroborate direct connections between the

6. suspect and the fraudulent activities. Employees at each mail
drop recognized a photograph of the suspect obtained from the
Department of Motor Vehicles. A subpoena to the credit card
number and a search of real estate property indicated where he
conducted most of his fraud. A 3rd company revealed the
suspect's Social Security the suspect's name turned up an
alternate residence the opportunity to uncover crimes in the
physical Internet.
Students respond to the following questions related to this case
in your
Cybertrail_YourLastName.docx
document.
Question 1 - Following the Cybertrail
Comment on the interconnectedness of the digital world. To
what extent does cyber-criminal have anonymity in their
transactions? Be detailed in your response.
Question 2 - Following the Cybertrail
By what means of your expertise in Digital Forensic Evidence
provide a critical forensic investigation approach that will play
a key role in protecting consumers in this scenario from digital
fraud such as this?