The scope of the investigation has been established, and you know that company p

Question

The scope of the investigation has been established, and you know that company polices clearly state the expectations for acceptable use and privacy. Management agrees that you should analyze the computers and surrounding work spaces for two employees.

Describe in detail the digital investigation process, and include the following steps:

Preparing for an investigation

Processing the scene

Collecting evidence

Processing evidence

Reporting findings

As part of your description, describe in detail the tasks that you plan to perform for steps 1 (preparing for an investigation) and 2 (processing the scene).

Also, note that management wants to keep this investigation as quiet as possible and wants no one outside of the investigative team, management team, and human resources team to know that this is taking place. They are particularly keen to make sure that the two suspected employees do not know that this is taking place.

Explanation / Answer

Digital Investigation Process include various steps that have been described in detail below:

1. Preperation of an Investigation: It basically refer to the intial preparation we do, to start the investigation. In this process we identify the various tools that we will use in the digital investigation, we identify various techniques, algorithms, and monitoring scheme, that will be helpful in the investigation. In this process we also identify various management support we required in later
phases of the investigation.

2. Processing the Scene: Its basically refer the the processing of the investigation scene on the bases of various techniques, algorithms, monitoring scheme, we have identified in the investigation phase. processing of the scene is very important and must be carried out with precaution and taking proper measures.

3. Collecting evidence: Here we are collecting the evidence of the physical scene, evidence place a vital role in the digial investigation process, because on the bases of these investigation we can come to any decision. Here we can also do the recording of the scene on the bases of standardized procedures.

4. Processing evidence: Here in this process of processing evidence, we try to process the various evidence, that we have captured during the collecting evidence phase. Here in the process we do the determintions of various evidence, try to reconstruct the scene and try to get the real picture of the scene. And try to come to the conclusion part.

5. Reporting findings: After Processing evidence, we have to report the findings. In processing evidence phase, we try to come to any conclusion and here in this process, we do the reporting of the conclusion, that we have drawn in the previous step. It also involve the summary of the scene and the explanation of the conclusions.

Related Questions

Navigate

• Browse (All)
• Browse T
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.