Unit of competency
Modification History
Release 1. This is the first release of this unit of competency in the DEF Defence Training Package. |
Application
This unit describes the skills and knowledge required to gather and analyse digital information to support digital forensic investigations. It includes identifying, collecting, analysing, presenting and maintaining information; compiling notes and statements of evidence; and removing portable digital storage from machines. It also covers the use of initial screening technology. This unit applies to those working in the gathering and analysis of digital information. The skills and knowledge described in this unit must be applied within the legislative, regulatory and policy environment in which they are carried out. Organisational policies and procedures must be consulted and adhered to, particularly those relating to work health and safety (WHS) and the gathering and analysis of digital information. Those undertaking this unit would work independently or as part of a team, under indirect supervision, while performing complex tasks in a broad range of contexts. They must be able to use discretion and judgement and take responsibility for the quality of their outputs. No licensing, legislative or certification requirements apply to unit at the time of publication. |
Pre-requisite Unit
Not applicable. |
Competency Field
Digital Forensics. |
Unit Sector
Not applicable. |
Elements and Performance Criteria
ELEMENTS |
PERFORMANCE CRITERIA |
||
Elements describe the essential outcomes. |
Performance criteria describe the performance needed to demonstrate achievement of the element. |
||
1 |
Detect and record digital evidence |
1.1 |
Detect digital evidence using observational techniques and technological methods |
1.2 |
Record digital evidence prior to examination |
||
1.3 |
Document the recorded digital evidence |
||
2 |
Collect and analyse digital evidence |
2.1 |
Collect digital evidence by handpicking or removal of portable digital storage from machine to prevent contamination or loss |
2.2 |
Ensure collected digital evidence is sufficient in detail, where possible, to allow all potential examinations/analysis to be carried out |
||
2.3 |
Conduct initial analysis of collected digital evidence and report on outcomes |
||
3 |
Package digital evidence |
3.1 |
Package and store items to maintain continuity and prevent degradation or contamination |
3.2 |
Enter details of digital evidence collected in case notes and, where appropriate, in the exhibit register to maintain the chain of custody |
Foundation Skills
Foundation skills essential to performance are explicit in the performance criteria of this unit of competency. |
Range of Conditions
Range is restricted to essential operating conditions and any other variables essential to the work environment. Non-essential conditions may be found in the DEF Defence Training Package Companion Volume Implementation Guide. |
Unit Mapping Information
This unit supersedes and is equivalent to DEFFOR003 Gather and analyse electronic information. |
Links
Companion Volume Implementation Guides are found on VETNet - https://vetnet.gov.au/Pages/TrainingDocs.aspx?q=6bdbab1e-11ed-4bc9-9cba-9e1a55d4e4a9