Header logo

Your learning

Complete Digital Forensics Session E – Investigation Planning

After Session D, plan the next phase of Operation Akwaaba — objectives, evidence priorities, hypotheses, risks, and sequenced investigation actions.

Last reviewed: 28 August 2026

Before you begin

  • Your institution has enabled Domain Laboratories.
  • You have an active Academic Enrolment on the Course Offering.
  • Teaching staff have attached and enabled the Digital Forensics Laboratory.
  • You have completed Sessions A–D for the same laboratory (Evidence Integrity, Browser Evidence, Mobile Acquisition, and Mobile Analysis).

Open Session E

  1. Open My Learning and enter the Course Offering Learning Experience.
  2. Open Laboratories and launch Digital Forensics Laboratory.
  3. On the Digital Forensics hub, confirm Session D shows Completed.
  4. Select Start Session E (or Continue Planning / Review Session E).

Build the investigation plan

  1. Review the Investigation overview and refine scope and next actions for Operation Akwaaba.
  2. Add objectives, known facts, and unknown facts so gaps are explicit.
  3. Record working and alternative hypotheses that remain testable.
  4. Review the seeded evidence inventory from Sessions A–D and set priorities in the priority matrix.
  5. Add investigation tasks, risks, legal considerations, and resource requirements.
  6. Build an investigation timeline that sequences high-priority, lawful next steps.
  7. Create evidence mappings that connect browser evidence, mobile evidence, timeline events, findings, hypotheses, and objectives.
  8. Complete guided planning activities and decision support scenarios for educational feedback.
  9. Optionally download the Investigation Plan, Evidence Priority Report, or Hypothesis Summary PDFs.
  10. Select Mark plan ready, then Complete Session E to return to Learning Experience.

Notes

  • After each step (or on reload), the workspace opens on the section you need next.
  • Planning contributions append to the same case file from Sessions A–D. Earlier evidence is not overwritten.
  • Session E teaches investigative reasoning and planning — it is not project-management software or a commercial case-management system.
  • Session Completion PDF records Session E contribution only — it is not a final forensic investigation report.
  • After Session E is completed, Session F – Evidence Correlation & Integrated Investigation unlocks on the Digital Forensics hub.