. The preferred way to collect digital evidence is through a(n) _____ acquisition.
Added by Savannah G.
Step 1
Digital evidence refers to information stored or transmitted in digital form that can be used in legal proceedings. Show more…
Show all steps
Your feedback will help us improve your experience
Haricharan Gupta and 65 other AP CS educators are ready to help you.
Ask a new question
Labs
Want to see this concept in action?
Explore this concept interactively to see how it behaves as you change inputs.
Key Concepts
Recommended Videos
An ____________________ is performed by an outside firm and involves turning over audit logs or network logs in general.
Haricharan G.
What type of data must be collected before shutting down a compromised networked device? (Choose one) a. a list of the processes running on the computer b. a list of files in the Recycle Bin c. the files in the temporary Internet Files cache d. any temporary application
Madhur L.
Lab Questions: ANSWERS MUST BE IN COMPLETE SENTENCES FOR FULL CREDIT. 1. What is a forensic image? Record your MD5 and SHA hashes. Include a screenshot from your overview tab showing the breakdown of evidence types. 2. What indicates a file has been deleted in FTK? (Besides showing up in the "deleted files" section of the overview tab.) Record your MD5 and SHA hashes. 3. What is the difference (if any) between the computed hash and the report hash calculated in your lab? (Were the hashes in Question 2 and Question 5 the same? What does this indicate?) 4. What information did you learn about the practice case.001 dd image you downloaded from Blackboard? What kind of file system and operating system was used to create this disk? (Hint: If you can identify the file system, look up the associated operating system.) Why is it important to run WinHex or other forensic tools in Write Protect mode? 5. Why is it important to securely wipe (erase) a disk before saving evidence to it? 6. What is Safe Mode and how do you get into it? Where would you go to find out which device the machine is set to boot from? 7. What is the System Restore tool used for? How do you set a system restore point? Why is the System Restore tool of interest to a forensic examiner?
Akash M.
Recommended Textbooks
Computer Science and Information Technology
Introduction to Programming Using Python
Computer Science - An Overview
Transcript
18,000,000+
Students on Numerade
Trusted by students at 8,000+ universities
Watch the video solution with this free unlock.
EMAIL
PASSWORD