Complete Digital Forensics Session F – Evidence Correlation

Before you begin

• Your institution has enabled Domain Laboratories.
• You have an active Academic Enrolment on the Course Offering.
• Teaching staff have attached and enabled the Digital Forensics Laboratory.
• You have completed Sessions A–E for the same laboratory (Evidence Integrity, Browser Evidence, Mobile Acquisition, Mobile Analysis, and Investigation Planning).

Open Session F

1. Open My Learning and enter the Course Offering Learning Experience.
2. Open Laboratories and launch Digital Forensics Laboratory.
3. On the Digital Forensics hub, confirm Session E shows Completed.
4. Select Continue Session (or Resume Investigation / Review Session F).

Correlate the evidence

1. Review the Evidence dashboard and refine the narrative summary for Operation Akwaaba.
2. In Timeline correlation, record validations for chronology, gaps, conflicts, duplicates, or unexpected behaviour.
3. In Evidence relationships, connect browser history, mobile artefacts, SMS, calls, locations, photos, downloads, documents, timeline events, and findings.
4. Use the workspace sections (Communication network, Location, Device, Browser, Financial) to focus your reasoning — they share the same timeline validation tools.
5. Evaluate Investigation hypotheses from Session E: support, reject, or mark inconclusive, with confidence and reasoning.
6. Record Contradictions and Missing evidence so gaps stay explicit.
7. Review and update the Evidence matrix (reliability, confidence, related items).
8. Add Conclusions, marking each as fact or assumption.
9. Open Case file, download the Evidence Correlation, Timeline Validation, or Integrated Investigation Summary PDFs if needed.
10. Select Mark case file updated, then Complete Session F to return to Learning Experience.

Notes

• After each step (or on reload), the workspace opens on the section you need next. Use Copy on evidence references in relationships when you reuse them in forms.
• Session F contributions append to the same case file from Sessions A–E. Earlier evidence is not overwritten.
• Session F teaches evidence correlation and investigative reasoning — it is not a commercial link-analysis or intelligence platform.
• Session Completion PDF records Session F contribution only — it is not a final forensic investigation report.
• After you complete Session F, Session G – Professional Forensic Reporting unlocks so you can prepare the final laboratory report.