issc351 Lab #9 – Assessment Worksheet Identifying and Documenting Evidence from a Forensic Investigation

Lab #9 – Assessment Worksheet Identifying and Documenting Evidence from a Forensic Investigation
Lab Assessment Questions
1. What is the forensic specialist responsible for during an investigation? 2. Describe the importance of proper documentation in a forensic investigation. How can the chain of custody affect the investigation? 3. What is a write-blocker and why is it necessary to have one in a forensic toolkit? 4. How many files were discovered by the text search for the word bad? 5. What was the file name for the image of the credit card receipt identified during the lab? In which folder was it located? 6. What is the purpose of the MD5 hash file that is generated with a P2 Commander report? 7. Which report type did you choose as your second report in this lab? Why did you choose that report

-
Rating:
5/
Solution: issc351 Lab #9 – Assessment Worksheet Identifying and Documenting Evidence from a Forensic Investigation