Assignment
1. Using a Web browser, perform some research on a newer malware variant that has been reported by a major malware containment vendor. Using a search engine, go to the vendor's Web site; this could be Symantec, McAfee,or any of their competitors. Visit one malware prevention software vendor.Search for the newest malware variants and pick one. Note its name and try to understand how it works. Now look for information about that same malware from at least one other vendor. Were you able to see this malware at both vendors? If so, are there any differences in how they are reported between the two vendors?
2. Log management and log analysis are techniques used to collect and report on what's happening on a network. Visit the log management community's Web site at www.
syslog.org. This site is devoted to log management tools and the techniques to use the tools. Click the Compliance tab and read the material found there for more information about what are considered best practices for log management.
3. Depending on copyright, the documentary "The KGB, the Computer and Me" may be available for viewing on public video-streaming services. Use a search engine to search for the title, and watch it if it is available. (The video remains available as of 2012. It runs about 57 minutes.)
Exercise 8-1
Using a Web search engine, look up "Trojan Defense." How can it be used to question the conclusions drawn from a forensic investigation?
Exercise 8-2
At the end of 2006, a new edition of the Federal Rules of Civil Procedure (FRCP) went into effect. Using a Web search tool, learn more about the FRCP. What likely effect will its emphasis on electronically stored information (ESI) have on an organization's need for a digital forensic capability?
Exercise 8-3
Using a Web search tool, identify some common certifications for digital forensic practi-tioners and determine whether the certifications are for practitioners at public sector organi-zations or private sector organizations.
Complete the real world exercises at the end of the chapter. Write your answers in complete sentences and use APA formatting rules. Each answer should be a minimum of 1 paragraph (3 or more sentences)
Text Book: Principles of Incident Response and Disaster Recovery by Michael E. Whitman, Herbert J. Mattord and Andrew Green, Second Edition.
Format your assignment according to the following formatting requirements:
1. The answer should be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides.
2. The response also includes a cover page containing the title of the assignment, the student's name, the course title, and the date. The cover page is not included in the required page length.
3. Also include a reference page. The Citations and references should follow APA format. The reference page is not included in the required page length.