CYB $220$ Practical Exercise $1$: Digital Forensics

Objective: Computer Forensics follows a specific process to establish facts in a case. The process is the same regardless of whether the case is civil or criminal. The process must be followed diligently to ensure that evidence is not accidentally altered and that conclusions drawn from the evidence are appropriate.

Background Information: Answer the following questions in your own words and provide any reference to sources you have used to back up your claims.

$1.$ What is digital$/$computer forensics?

$2.$ What scope$-$related challenges are there to system forensics?

$3.$ How do the general guidelines apply?

$4.$ Why is the unallocated space of a Windows system so important to a forensic investigator?

$5.$ What is the Daubert standard?

$6.$ Why must a forensic investigator be familiar with emerging technologies?