Process of using scientific knowledge in analysis and presentation of evidence in court
The application of computer science and investigative procedures for a legal purpose involving the analysis of digital evidence after proper search authority, a chain of custody, validation with mathematics, use of validated tools, repeatability, reporting, and possible expert presentation
A process where we develop and test hypotheses that answer questions about digital events
Use of science or technology in the investigation and establishment of the facts or evidence in a court of law
I and III
II and IV
II, III, and IV
Availability of service
Continuity of operation
The digital forensic investigator must maintain absolute objectivity.
It is the investigator’s job to determine someone’s guilt or innocence.
It is the investigator’s responsibility to accurately report the relevant facts of a case.
The investigator must maintain strict confidentiality, discussing the results of an investigation on only a “need to know” ba.
Easy to destroy
Easy to sustain
Hard to get
Both A and C
None of these