Unit of competency
Modification History
Release 1. This is the first release of this unit of competency in the DEF Defence Training Package. |
Application
This unit describes the skills and knowledge required to analyse digital data that has been acquired through a range of digital forensic methodologies. It includes analysing digital storage devices for artefacts that may become evidence. This unit applies to those working in the gathering and analysis of digital data. The skills and knowledge described in this unit must be applied within the legislative, regulatory and policy environment in which they are carried out. Organisational policies and procedures must be consulted and adhered to, particularly those relating to work health and safety (WHS) and the conducting of digital data search and analysis. Those undertaking this unit would work independently, with minimal supervision, while performing complex tasks, including making complex judgements. They would use discretion and judgement and take responsibility for the quality of their outputs. No licensing, legislative or certification requirements apply to unit at the time of publication. |
Pre-requisite Unit
Not applicable. |
Competency Field
Digital Forensics. |
Unit Sector
Not applicable. |
Elements and Performance Criteria
ELEMENTS |
PERFORMANCE CRITERIA |
||
Elements describe the essential outcomes. |
Performance criteria describe the performance needed to demonstrate achievement of the element. |
||
1 |
Reduce and describe data |
1.1 |
Identify digital data to be analysed |
1.2 |
Reduce the data, identify possible artefacts and describe these in a suitable form to support the development of interpretations |
||
1.3 |
Decrypt data if appropriate |
||
1.4 |
Review the reduction and description processes to determine their suitability for acquisition and analysis, and make improvements where necessary |
||
1.5 |
Save data not used in the reduction and description processes for future reference |
||
2 |
Analyse and interpret data |
2.1 |
Interpret the data using deduction, induction and problem-solving techniques |
2.2 |
Analyse digital storage devices for artefacts that may become evidence |
||
2.3 |
Apply sound reasoning to ensure consistency of interpretations based on the data |
||
2.4 |
Base interpretations on the factual quantitative and qualitative data |
||
2.5 |
Develop a reconstruction of events using analysis techniques |
||
3 |
Develop conclusions and recommendations |
3.1 |
Test and review possible interpretations to ensure they are credible and consistent with relevant data |
3.2 |
Refine and consolidate interpretations to strengthen inferences drawn |
||
3.3 |
Clearly state assumptions in the arguments leading to inferences |
||
3.4 |
Formulate sound inferences, probable predictions, interpretations and/or explanations from facts and the tested interpretations |
||
3.5 |
Ensure transparency in the investigation process by formulating inferences through a clear chain of reasoning |
||
3.6 |
Review inferences to identify and address any fallacies in reasoning |
||
3.7 |
Assess the relationship between the data developed and the probable interpretations to ensure validity and compliance, and report in accordance with organisational requirements |
||
3.8 |
Develop and report conclusions and recommendations, addressing evidential requirements |
Foundation Skills
Foundation skills essential to performance are explicit in the performance criteria of this unit of competency. |
Range of Conditions
Range is restricted to essential operating conditions and any other variables essential to the work environment. Non-essential conditions may be found in the DEF Defence Training Package Companion Volume Implementation Guide. |
Unit Mapping Information
This unit supersedes and is equivalent to DEFFOR006 Conduct electronic data search and analysis. |
Links
Companion Volume Implementation Guides are found on VETNet - https://vetnet.gov.au/Pages/TrainingDocs.aspx?q=6bdbab1e-11ed-4bc9-9cba-9e1a55d4e4a9