FCM 753 Assignment 7: Nice Corp. Data Theft Investigation Report

This report details a forensic investigation conducted by a student, addressing a data theft incident at Nice Corporation. The investigation was prompted by reports of client data being found on a public post, leading to concerns about a potential hacking incident. The student, acting as a forensic investigator, analyzed a compromised Linux server and the computer of a suspect, Mr. James. The investigation employed tools like Autopsy, Sematext logs, and LogFusion to analyze the server logs, identify the methods of attack, and trace the attacker. Evidence included the analysis of Mr. James's computer, revealing the use of the Camouflage program to encrypt and hide stolen data. The report concludes that the company was compromised via a brute force attack. The report includes detailed findings, timelines, screenshots, and a list of tools used in the investigation. The findings are based on the analysis of server access logs, file analysis, and timeline generation to understand the sequence of events and the extent of the breach.