Podcast
Questions and Answers
What happens to computers that are turned off in a digital evidence collection?
What happens to computers that are turned off in a digital evidence collection?
- They are left at the crime scene
- They are destroyed to prevent contamination
- They are collected into evidence as per usual agency digital evidence procedures (correct)
- They are analyzed immediately to prevent data loss
What is the purpose of creating an image or work copy of the original storage device?
What is the purpose of creating an image or work copy of the original storage device?
- To store the original device
- To prevent contamination of the original device (correct)
- To analyze the device immediately
- To destroy the original device
Why is it important to use 'clean' storage media in digital evidence analysis?
Why is it important to use 'clean' storage media in digital evidence analysis?
- To prevent contamination or introduction of data from another source (correct)
- To make the analysis faster
- To make the analysis more expensive
- To make the analysis less accurate
What might happen if an analyst puts a copy of the suspect device on a CD that already contains information?
What might happen if an analyst puts a copy of the suspect device on a CD that already contains information?
What is not sufficient when dealing with reusable digital storage media?
What is not sufficient when dealing with reusable digital storage media?
Who takes the steps to retrieve and analyze data in a laboratory?
Who takes the steps to retrieve and analyze data in a laboratory?
What is becoming a highly valued asset among digital evidence examiners?
What is becoming a highly valued asset among digital evidence examiners?
Which independent organization offers vendor-neutral certification in digital forensics?
Which independent organization offers vendor-neutral certification in digital forensics?
What type of task forces are typically involved in digital forensics and evidence handling?
What type of task forces are typically involved in digital forensics and evidence handling?
Why is it essential for agencies and investigators to work together in digital forensics?
Why is it essential for agencies and investigators to work together in digital forensics?
What is a significant challenge when collecting digital devices at a crime scene?
What is a significant challenge when collecting digital devices at a crime scene?
Which agency can provide assistance in specialty areas of digital forensics in the United States?
Which agency can provide assistance in specialty areas of digital forensics in the United States?
What is the purpose of generating a hash value report from a suspect's hard drive?
What is the purpose of generating a hash value report from a suspect's hard drive?
What is the benefit of calculating hash values in electronic discovery and computer forensics?
What is the benefit of calculating hash values in electronic discovery and computer forensics?
What can be displayed in a courtroom as evidence pulled from files?
What can be displayed in a courtroom as evidence pulled from files?
What is a common misconception about digital evidence?
What is a common misconception about digital evidence?
What can render digital evidence unreadable?
What can render digital evidence unreadable?
What is the purpose of creating an image of a hard drive in a laboratory?
What is the purpose of creating an image of a hard drive in a laboratory?
How many text messages are typically stored on a mobile device?
How many text messages are typically stored on a mobile device?
What type of data can be obtained from a mobile device's location history?
What type of data can be obtained from a mobile device's location history?
What is a potential source of location information in addition to mobile devices?
What is a potential source of location information in addition to mobile devices?
What type of file data is contained in photos taken with a GPS-enabled device?
What type of file data is contained in photos taken with a GPS-enabled device?
Who should examine digital evidence according to the National Institute of Justice?
Who should examine digital evidence according to the National Institute of Justice?
What challenge do local law enforcement agencies face when dealing with digital evidence?
What challenge do local law enforcement agencies face when dealing with digital evidence?
What is the primary purpose of generating a hash value from a string of text?
What is the primary purpose of generating a hash value from a string of text?
What type of data is often embedded within a file to describe its properties?
What type of data is often embedded within a file to describe its properties?
What is the term for a user-defined section of electronic media?
What is the term for a user-defined section of electronic media?
What is the purpose of a work copy in digital evidence analysis?
What is the purpose of a work copy in digital evidence analysis?
What is an example of a type of media that can store data?
What is an example of a type of media that can store data?
What is the term for the instructions written in a programming language to build a computer program?
What is the term for the instructions written in a programming language to build a computer program?
