Module 4 Discussion Questions

Include references in APA format.

1. Discuss each of the three steps in the Digital Forensic Examination Protocol process and describe why it is important to validate the results of evidence gathering tools.
2. As a forensic investigator, why would you want to review information located in the Window’s try? Include the types of information that is located in the Windows try in your discussion.
3. Discuss the major advantages and disadvantages of both hardware and software write-blockers. The discussion should include examples of price and performance descriptions for two hardware and two software tools. HINT: Use the list of vendors listed in chapter 6 of the textbook offering write-blocking devices.