CCJS 321: Locard’s exchange principle states, “A criminal action of an individual cannot occur without leaving a mark”

Student accurately and in some detail defined Locard’s exchange principle and explained how it pertains to digital evidence.

Student accurately and in some detail described best practices for digital evidence collection and acquisition.

Student accurately and in some detail described the types of artifacts that may be found for 3 items of digital evidence.

Student accurately and in some detail explained how the types of artifacts listed above can be used to prove and disprove allegations.

The writing indicates effort above and beyond in the areas of research, analysis, critical thinking, and other perspectives.

While critical thinking, command of the material, or connections made may have been only adequate in limited incidences, the student generally displayed superior critical thinking and superior command of this subject and discussion. Positions were generally supported by appropriate sources.

Clear application of theory and knowledge to the facts.

Most terminology references are correctly applied.

Points Available: 64-71.9

Student accurately defined Locard’s exchange principle and explained how it pertains to digital evidence.

Student accurately described best practices for digital evidence collection and acquisition.

Student accurately described the types of artifacts that may be found for 3 items of digital evidence.

Student accurately described how the types of artifacts listed above can be used to prove and disprove allegations.

While critical thinking, command of the material, or connections made may have been limited on occasion, the student displayed adequate critical thinking and adequate command of this subject and discussion. Most positions taken were adequately supported by appropriate sources.

Application of theory and knowledge indicates a general understanding of the concepts and focus of the assignment.

Terminology usage is generally correct.

Points available: 56-63.9

Student inaccurately or insufficiently defined Locard’s exchange principle or did not adequately explain how it pertains to digital evidence.

Student inaccurately or insufficiently described best practices for digital evidence collection and acquisition.

Student inaccurately or insufficiently described the types of artifacts that may be found or described artifacts for less than 3 more items of digital evidence.

Student inaccurately or insufficiently explained how the types of artifacts listed above can be used to prove and disprove allegations.

The writing demonstrates less than sufficient work and does not generally reflect an adequate understanding of the content.

The student generally displayed limited critical thinking and limited command of this subject and discussion. The student generally made limited connections between the material and the answers to the prompts and positions taken were largely not supported by appropriate sources.

Application of theory and knowledge does not generally demonstrate an understanding of the concepts and focus of the assignment.

Most terminology was used incorrectly or insufficiently to indicate an adequate understanding of the concepts.

Points available D: 48-55.9

Points available F: 0-47.9

Student accurately and in some detail explained the steps a digital forensic practitioner should take when encountering a running laptop.

Student accurately and in some detail explained the types of data found on a running laptop and why the data is beneficial.

Student includes an accurate explanation of RAM and Order of Volatility.

The writing indicates effort above and beyond in the areas of research, analysis, critical thinking, and other perspectives.

While critical thinking, command of the material, or connections made may have been only adequate in limited incidences, the student generally displayed superior critical thinking and superior command of this subject and discussion. Positions were generally supported by appropriate sources.

Clear application of theory and knowledge to the facts.

Most terminology references are correctly applied.

Points Available: 32-35.9

Student accurately explained the steps a digital forensic practitioner should take when encountering a running laptop.

Student accurately explained the types of data found on a running laptop and why the data is beneficial.

Student includes an accurate explanation of RAM or Order of Volatility.

While critical thinking, command of the material, or connections made may have been limited on occasion, the student displayed adequate critical thinking and adequate command of this subject and discussion. Most positions taken were adequately supported by appropriate sources.

Application of theory and knowledge indicates a general understanding of the concepts and focus of the assignment.

Terminology usage is generally correct.

Points available: 28-31.9

Student inaccurately or insufficiently explained the steps a digital forensic practitioner should take when encountering a running laptop.

Student inaccurately or insufficiently explained the types of data found on a running laptop or why the data is beneficial.

Student does not mention RAM or Order of Volatility.

The writing demonstrates less than sufficient work and does not generally reflect an adequate understanding of the content.

The student generally displayed limited critical thinking and limited command of this subject and discussion. The student generally made limited connections between the material and the answers to the prompts and positions taken were largely not supported by appropriate sources.

Application of theory and knowledge does not generally demonstrate an understanding of the concepts and focus of the assignment.

Most terminology was used incorrectly or insufficiently to indicate an adequate understanding of the concepts.

Points available D: 24-27.9

Points available F: 0-23.9

Student accurately and in some detail defined hash values and the act of “hashing” data.

Student accurately and in some detail described 2 ways hash values are used by digital forensic practitioners.

The writing indicates effort above and beyond in the areas of research, analysis, critical thinking, and other perspectives.

While critical thinking, command of the material, or connections made may have been only adequate in limited incidences, the student generally displayed superior critical thinking and superior command of this subject and discussion. Positions were generally supported by appropriate sources.

Clear application of theory and knowledge to the facts.

Most terminology references are correctly applied.

Points Available: 32-35.9

Student accurately defined hash values and the act of “hashing” data.

Student accurately described 2 ways hash values are used by digital forensic practitioners.

While critical thinking, command of the material, or connections made may have been limited on occasion, the student displayed adequate critical thinking and adequate command of this subject and discussion. Most positions taken were adequately supported by appropriate sources.

Application of theory and knowledge indicates a general understanding of the concepts and focus of the assignment.

Terminology usage is generally correct.

Points available: 28-31.9

Student inaccurately or insufficiently defined hash values and the act of “hashing” data.

Student inaccurately or insufficiently described hash values and provided less than 2 ways they are used by digital forensic practitioners.

The writing demonstrates less than sufficient work and does not generally reflect an adequate understanding of the content.

The student generally displayed limited critical thinking and limited command of this subject and discussion. The student generally made limited connections between the material and the answers to the prompts and positions taken were largely not supported by appropriate sources.

Application of theory and knowledge does not generally demonstrate an understanding of the concepts and focus of the assignment.

Most terminology was used incorrectly or insufficiently to indicate an adequate understanding of the concepts.

Points available D: 24-27.9

Points available F: 0-23.9

Student accurately and in some detail described the Chain of Custody and its importance to the Criminal Justice Process.

The writing indicates effort above and beyond in the areas of research, analysis, critical thinking, and other perspectives.

While critical thinking, command of the material, or connections made may have been only adequate in limited incidences, the student generally displayed superior critical thinking and superior command of this subject and discussion. Positions were generally supported by appropriate sources.

Clear application of theory and knowledge to the facts.

Most terminology references are correctly applied.

Points Available: 16-17.9

Student accurately described the Chain of Custody and its importance to the Criminal Justice Process.

While critical thinking, command of the material, or connections made may have been limited on occasion, the student displayed adequate critical thinking and adequate command of this subject and discussion. Most positions taken were adequately supported by appropriate sources.

Application of theory and knowledge indicates a general understanding of the concepts and focus of the assignment.

Terminology usage is generally correct.

Points available: 14-15.9

Student inaccurately or insufficiently described the Chain of Custody and its importance to the Criminal Justice Process.

The writing demonstrates less than sufficient work and does not generally reflect an adequate understanding of the content.

The student generally displayed limited critical thinking and limited command of this subject and discussion. The student generally made limited connections between the material and the answers to the prompts and positions taken were largely not supported by appropriate sources.

Application of theory and knowledge does not generally demonstrate an understanding of the concepts and focus of the assignment.

Most terminology was used incorrectly or insufficiently to indicate an adequate understanding of the concepts.

Points available D: 12-13.9

Points available F: 0-11.9

Student mostly followed APA and format requirements for this assignment but had up to 2 errors.

Student mostly followed the instructions for this assignment. Errors were minor.

Student used at least 3 appropriate resources overall to inform their thoughts and opinions for this assignment.

Points available: 16-17.9

Student mostly followed APA and format requirements for this assignment but had up to 3 errors.

Student mostly followed the instructions for this assignment.

Student used 2 or fewer appropriate resources overall to inform their thoughts and opinions for this assignment.

Points available: 14-15.9

Student did not generally follow APA format requirements for this assignment.

Student did not generally follow the instructions for this assignment.

Student used 1 or fewer appropriate resources overall to inform their thoughts and opinions for this assignment.

Points available D: 12-13.9

Points available F: 0-11.9

Writing quality in terms of grammar, punctuation, usage, structure, spacing, etc. as well as reader engagement is good.

Student had few writing, grammar, or spelling errors.

Points available: : 20-22.4

Writing quality in terms of grammar, punctuation, usage, structure, spacing, etc. as well as reader engagement is adequate.

Student had several writing, grammar, or spelling errors.

Points available: 17.5-19.9

Writing quality in terms of grammar, punctuation, usage, structure, spacing, etc. as well as reader engagement is inadequate or contains many errors that disrupt flow an understanding of the presentation.

Student did not meet writing, grammar, and/or spelling expectations.

Points available D: 15-17.4

Points available F: 0-14.9