The learning outcomes for UC2FPP102 requires students to have knowledge in the process of Triage and data preparation and identification as part of the general competence of the course. As a student of this course you are expected to understand the digital forensic process and correct evidence handling by following the appropriate procedures. This is evident in the ability to keep contemporaneous notes and appropriate documentation during the digital forensic process. As part of your assessment you will be provided with a scenario, remit of instruction and data to review. You will be required to review the information provided and triage the system(s). Essentially you are trying to determine whether the system(s) should move forward to a full forensic examination. After you have concluded your triage, finish by writing a short report, explaining the key findings of your ex- amination, and provide information which will be useful to the Senior Investigating Officer (SIO) in determin- ing whether the system(s) are relevant to the remit of the investigation and warrant further investigation; an outline is provided below. There is no explicit word count for the report, you should ensure that the report is clear and succinct. Throughout your practical work you must maintain detailed and accurate contemporaneous notes – these can be hand-written or typed. And must be uploaded to Moodle along with your ”Triage Report”, if you choose to use a digital format for contemporaneous note it is recommended that you make use of CNotes on the VLE to produce the expected notes.