Books Guide to Computer Forensics and Investigations, 4th Edition – Nelson, B. et al. (2010) – Cengage Learning – ISBN 1435498836
Mastering Windows Network Forensic and Investigation – Anson, S. et al. (2007) – Wiley – ISBN 0470097620
Read the following scenario and respond to the questions below:
As a digital forensics examiner, you have been called to the scene of a Kidnapping. Several witnesses have told the investigator that the victim was very excited about a new person they met online. Your job at the scene as a digital forensics examiner is to recommend to the investigating officer a course of action as to what digital evidence may or may not be needed to investigate this crime.
a. Provide a list of potential digital evidence that the investigator is going to want to seize for possible forensic examination. Be thorough, as the lead investigator in this case is not computer savvy.
b. Once the evidence is gathered, and transported back to the laboratory, describe in detail the steps you will go through to process this digital evidence and perform an examination. Discuss the tools that you will use, the scientific process that you will follow, and the mechanism for reporting evidence back to the investigator. Be sure to follow the three A’s!
c. What additional sources of evidence might there be besides the digital equipment and media that would have been seized? How would you gain access to this evidence?
Comments are closed.