You have been working for the DigiFirm Investigation Company for several months.

Question

You have been working for the DigiFirm Investigation Company for several months. The company has a new initiative to continually improve its processes.

Technology changes quickly. Therefore, companies need to change their procedures frequently to stay abreast of new developments. Organizations such as the National Institute of Justice and the FBI offer up-to-date recommendations on best practices.

There is a meeting scheduled for next week to talk about best practices in collecting digital evidence.

For this assignment:

Research best practices in collecting digital evidence.

Present at least five (5) best practices findings.

Explanation / Answer

Hi Dear,

Please find my answer.

The answer is as follows:
Best Practices (Digital Evidence Collection)
1. The details of the case and potential evidences should be thoroughly discussed with the investigator.
2. In case the evidences can't be removed, they should be copied or imaged.
3. Relevenat individuals (users, passwords, operating systems, network crediebtials etc) should be identified and interviewed
4. Individuals not in the collection team should be totally barred from the scene.
5. All the devices that are potential sources of storing digital evidence needs to be identified and searched upon.(USB, servers, wireless storage deivices)
6. The condition of the evidence needs to be documneted (Computer connections, surroundings near the computers etc)
7. Covert/hidden encrypted files or partitions on hard disk drive needs to be considered
8. The legal aspects of all the evidences needs to be considered (What can be collected, if any additional authority is required or not to get more information)
Best Practices (Expert Report)
1. Should have an introductory section about your expertise related to the concerning matter so that the reader gets a fair idea about you and also what is expected from you.
2. Section about the methodology section is also very important. It should include the approach for forming the opinions.It will give good idea to the reader about your opinions and also the why part.
3. There should be a summary section of findings and conclusions.It should include all the references and details responsible for your conclusions.
4.Knowledge on regulatory items in your field is also important. This includes statutes, regulations, codes, standards and guidance documents.
5.Should have a short history section of all the matters , materials which have been reviewed with dates received forming the basis of your opinions.

Related Questions

Navigate

• Browse (All)
• Browse Y
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.