Imagine you are a computer forensic examiner receiving a


Imagine you are a computer forensic examiner receiving a suspect hard disk drive from a detective in your department. The drive was seized properly during a legally executed search warrant. The detective signs the chain of custody log and hands you the drive. Your job is to accept the drive, conduct an analysis, and maintain the drive until trial. Please explain the steps you would take, from receipt of the evidence until testimony, including the reasons why you would take each step. For example, what would you check for when you sign for the drive on the chain of custody document?

Solution Preview :

Prepared by a verified Expert
Basic Computer Science: Imagine you are a computer forensic examiner receiving a
Reference No:- TGS02267604

Now Priced at $10 (50% Discount)

Recommended (92%)

Rated (4.4/5)