Complete Digital Forensics Session B – Browser Evidence

Before you begin

• Your institution has enabled Domain Laboratories.
• You have an active Academic Enrolment on the Course Offering.
• Teaching staff have attached and enabled the Digital Forensics Laboratory.
• You have completed Session A – Evidence Integrity for the same laboratory.

Open Session B

1. Open My Learning and enter the Course Offering Learning Experience.
2. Open Laboratories and launch Digital Forensics Laboratory.
3. On the Digital Forensics hub, confirm Session A shows Completed.
4. Select Start Session B (or Continue Session B).

Investigate browser evidence

1. Use the Browser evidence viewer to filter by browser or category, search, and sort by timestamp. Use Copy on artefact references (and the Session A SHA-256 if shown) when you need them for activities or findings.
2. Review the Artefact timeline for the sequence of browsing activity.
3. Complete each Investigation activity by selecting the matching artefact references. After each step (or on reload), the page returns you to the step you need next.
4. Append findings to your case file — each finding needs a title, description, artefact reference, importance, and optional notes.
5. Optionally add Student notes.
6. Select Mark summary ready, then optionally download the Browser Evidence Summary PDF.
7. Select Complete Session B to finish and return to Learning Experience.

Notes

• Artefacts are an educational dataset (Chrome, Firefox, Edge). AppliedMode does not read your real browser.
• Findings and timeline entries append to the same case file from Session A. Earlier evidence is not overwritten.
• Session Completion PDF records Session B contribution only — it is not a final investigation report.
• After Session B, Session C – Mobile Acquisition unlocks on the Digital Forensics hub.