In a forensic investigation, what documents the evidence-gathering process and includes the history and possession of a sample from the time of its collection to its final disposition? O Cabinet lock Search warrant Warning banner Chain of custody
Added by Geoffrey H.
Close
Step 1
Step 1: The question asks what documents the evidence-gathering process and includes the history and possession of a sample from the time of its collection to its final disposition in a forensic investigation. Show more…
Show all steps
Your feedback will help us improve your experience
Akash M and 91 other AP CS educators are ready to help you.
Ask a new question
Labs
Want to see this concept in action?
Explore this concept interactively to see how it behaves as you change inputs.
Key Concepts
Recommended Videos
Rules of Engagement: The work must be performed in a Windows OS command line tools only (except for FTK Image to mount the image, and WinHex or other hex tool, to view headers). No PowerShell. If the hashing tool you use has recursion, you may not use the recursive functionality. Hand in a brief report as if you were the investigator. This report should go over any research you did, tasks performed, commands used, evidence found, if any, location of evidence, and conclusions drawn. You may collaborate with other students on completing the lab. The report will be an individual effort. If you collaborated with another student on completing the lab, include that information in your report. Scenario: You are employed as a private contractor for the Department of Defense. You have been assigned to examine a drive image that belongs to an employee of the Acme Widget company. The MD5 hash for the drive image is ac7570675c11442e0235cf8a7116b7ef. Acme Widget has been supplying parts for the Zumwalt class destroyer, and it is believed the employee may have copied classified files to his computer. The file that is thought to have been copied is a detailed photo of the USS Zumwalt. The MD5 hash for this file is E1E64F2175991722EF80AF7764AF9A75. The suspect may have taken steps to hide the file, so the name and extension on the file may not be accurate. Determine if the file is on the image provided. Hints: DOS / CMD For Loops Ping sweep loop example for /L %n in (250,1,255) do ping 10.127.127.%n Don't use /L in your loop Read for /? Need a list of files dir /s /b Find can help you find things in a file. Use /I option to make it case insensitive. <command 1> | <command 2> Output of command 1 becomes input of command 2 [command] > output.txt Redirects standard output of command to output.txt. If the file exists, it overwrites it. [command] >> output.txt Redirects standard output of command to output.txt. If the file exists, it appends to it.
Akash M.
When implementing Chain of Custody protocols, when does the chain begin?
Madhur L.
In this crime scene scenario, there are a number of evidence types that you will need to collect. The crime scene is a single-floor house with a burned-down tool shed in the back. There is a mailbox that appears to have been hit by a car backing out of the driveway. It is 90 degrees Fahrenheit with 100% humidity. The items you will collect include the following: 1. A vial of liquid blood 2. Stains on clothing that may be semen 3. A paper packet containing an unknown powder 4. Fumes from the shed that was burned to the ground, containing a body (the body will be handled by the medical examiner, not you) 5. Paint transfer apparently from a vehicle onto the mailbox in front of the crime scene 6. Hair and fiber found on a hammer with what appears to be dried blood In a 4-6 page paper, complete the following: 1. Describe the methods you would use to pack these items for transport to the lab. 2. Explain the danger of evidence degradation due to the environment. 3. Describe the instrumentation at the lab that might be used to examine the evidence.
Recommended Textbooks
Computer Science and Information Technology
Introduction to Programming Using Python
Computer Science - An Overview
Transcript
Watch the video solution with this free unlock.
EMAIL
PASSWORD