Assignment:
You are the crime scene investigator, and you have been called to a home that authorities believe contains child pornography on the owner’s computer. You know that an untrained investigator should never attempt to retrieve data from a computer, and you have not been trained to do so. Therefore, you will be required to seize, secure, and deliver this computer to a trained professional in the lab.
Guidelines:
Answer the following in 1,250 to 1,500 words:
- Outline and describe the process of computer forensics.
- What types of training must be provided to computer and network forensics investigators? Explain.
- With regard to the above scenario, as the crime scene technician, what would you photograph? Why? Explain in detail.
- What if the computer is a personal desktop not connected to a particular network?
- Should you shut it down? Explain in detail.
- What if the computer is networked with other computers in a building?
- What would be the next step after locating the machine? Explain your reasoning.
- When would computer forensics evidence become inadmissible in court? Explain.
- What can be done to avoid this? Explain.