Assignment 2
1. Digital devices may be collected in a broken state with files already deleted. What methods can digital forensic practitioners employ to extract or recover these lost files?
2. Locard’s exchange principle states, “A criminal action of an individual cannot occur without leaving a markâ€. Explain what this principle means for digital evidence.
Save your time - order a paper!
Get your paper written from scratch within the tight deadline. Our service is a reliable solution to all your troubles. Place an order on any task and we will take care of it. You won’t have to worry about the quality and deadlines
Order Paper Nowa. Describe best practices that should be followed to ensure digital forensic practitioners don’t leave their own “marks†on the evidence during collection and acquisition.
b. Choose three items of digital evidence from the following list and describe what types of digital “marks†(artifacts) might by left by a user. (Laptop, Router, External Hard Drive, Thumb Drive, Smartphone, Gaming Console, IoT devices, Home Surveillance Systems, Vehicles)
c. How can examiners/investigators use this information to prove or disprove the allegations under investigation?
3. What actions should a digital forensic professional take when encountering a running (live) laptop?
a. What beneficial data may be found on the live system that would not be found on a powered off (dead) system?
4. Describe cloud storage and explain its importance to investigators.
a. How can investigators preserve and gain access to cloud data?
b. Do investigators need legal authorization to access the data? Why or why not?
Format Requirements
- Paper must be double spaced, 11 or 12 pt font and 1†margins all around.
- All APA 7th edition format requirements must be followed (cover page, in text citations, reference page).
