Explain some important parts of the computer forensic process.
Provide short and concise answers to the following questions:
- What are some of the key considerations for an "on-site" examiner, also known as a "first responder"?
- What are two attributes of a timestamp that could be located on a computer system? (List and explain.)
- When documenting and reporting a computer forensic examination (investigation), what are some common notes that should be maintained? (List and explain.)
- What are the four major steps to completing the processing of digital evidence?
Cite sources according to APA format.