Last updated on October 13, 2007
 |
Introduction
Everyone knows or at least should know that what you do on a computer can be tracked and held against you should you be involved with some illegal activity. Probably the first example that comes to mind is how police experts can track sexual predators from the internet to their respective computers. This may be one of the more publicized aspects of computer forensics but it is far from the only reason police may seize a computer when a crime has been committed.
Assignment One -
Read Computer Forensics 101 and answer the following questions:
Give three examples of crimes where police might seek a computer forensics expert to find evidence on a computer.
What is a chain of custody?
Why would it be important to be able to examine encrypted, hidden or deleted files?
What must a computer forensics professional do first to avoid altering the drive on the suspect computer?
Assignment Two-
In the Data article they give a federal statute definition of a computer. According to this definition can you think of any other devies that may fall into this category? Write down a couple of examples that could be viewed as a computer given this definition.
According to this article what could be seen as the most compelling evidence of all when it comes to electronic data?
Give your own definition of what you see to be 'disk slack'.
True / False A Computer Forensics Investigator should help to interpret the data recovered.
Care to know more....??? Computers are identified on networks and therefore the internet by individual IP addresses. Even more telling is the MAC address system on many internal components of every computer. By using this information every computer is seen as unique and can be tracked down by such means!