100% satisfaction guarantee Immediately available after payment Both online and in PDF No strings attached
logo-home
Previously searched by you
Previously searched by you
logo
WGU C702 Forensics and Network Intrusion Study Guide with complete solutions| Latest Update 2024/2025. $12.49
Add to cart
Quickly navigate to
Preview
  2.  
  3. WGU C702
  4.  
  5. WGU C702

Exam (elaborations)

WGU C702 Forensics and Network Intrusion Study Guide with complete solutions| Latest Update 2024/2025.
 0 purchase
  • Course
  • WGU C702
  • Institution
  • WGU C702

Computer Forensics Investigation Process 1. Pre-Investigation 2. Investigation 3. Post-Investigation Forensic Readiness An organization's ability to make optimal use of digital evidence in a limited period and with minimal investigation costs. Criminal Cases Brought by law enforcement...

[Show more]

Preview 4 out of 40  pages

Document information

  • October 8, 2024
  • 40
  • 2024/2025
  • Exam (elaborations)
  • Questions & answers

Subjects

  • wgu c702
  • wgu c702 forensics and network intrusion study gui
  • wgu c702 forensics and network intrusion

Written for

  • WGU C702
  • WGU C702

Seller

avatar-seller
AcademiaExpert

Reviews received

Content preview

WGU C702 Forensics and Network i- i- i- i- i-




Intrusion Study Guide with i- i- i- i-




complete solutions| Latest Update. i- i- i-




Computer Forensics Investigation Process i- i- i- i-i- i- 1. Pre-Investigation
i-




2. Investigation
i-




3. Post-Investigation
i-




Forensic Readiness An organization's ability to make optimal use of
i- i-i- i- i- i- i- i- i- i- i- i-



digital evidence in a limited period and with minimal investigation costs.
i- i- i- i- i- i- i- i- i- i-




Criminal Cases Brought by law enforcement agencies in response to
i- i-i- i- i- i- i- i- i- i- i- i-



a suspected violation of law where a guilty outcome results in monetary
i- i- i- i- i- i- i- i- i- i- i- i-



damages, imprisonment, or both i- i- i-




Rule-Based Attack This type of attack is when the attacker already
i- i-i- i- i- i- i- i- i- i- i- i- i-



has some information about the password. The attacker can then write a
i- i- i- i- i- i- i- i- i- i- i- i-



rule so that the password-cracking software will only generate
i- i- i- i- i- i- i- i- i-



passwords that meet that particular rule. i- i- i- i- i-




Data Acquisition the process of obtaining, cleaning, organizing,
i- i-i- i- i- i- i- i- i- i-



relating, and cataloging source datai- i- i- i-

,First pro-active step; extract every bit of information present on the
i- i- i- i- i- i- i- i- i- i- i-



victim's hard disk i- i-




Administrative Cases An internal investigation by an organization to i- i-i- i- i- i- i- i- i- i- i-



discover if its employees/clients/partners are abiding by the rules or
i- i- i- i- i- i- i- i- i- i-



policies (Violation of company policies). Non-criminal in nature and are
i- i- i- i- i- i- i- i- i- i-



related to misconduct or activities of an employee
i- i- i- i- i- i- i-




Rules of Forensic Investigation
i- Safeguard the integrity of the
i- i- i-i- i- i- i- i- i- i-



evidence and render it acceptable in a court of law. The forensic
i- i- i- i- i- i- i- i- i- i- i- i-



examiner must make duplicate copies of the original evidence. The
i- i- i- i- i- i- i- i- i- i-



duplicate copies must be accurate replications of the originals, and the
i- i- i- i- i- i- i- i- i- i- i-



forensic examiner must also authenticate the duplicate copies to avoid
i- i- i- i- i- i- i- i- i- i-



questions about the integrity of the evidence. Must not continue with
i- i- i- i- i- i- i- i- i- i- i-



the investigation if the examination is going to be beyond his or her
i- i- i- i- i- i- i- i- i- i- i- i- i-



knowledge level or skill level. i- i- i- i-




Cyber Crime Investigation Methodology/Steps
i- 1.Identify the i- i- i-i- i- i- i-



computer crime 2.Collect preliminary evidence 3.Obtain court warrant
i- i- i- i- i- i- i- i-



dor discovery/seizure of evidence 4.Perform first responder procedures
i- i- i- i- i- i- i- i-



5.Seize evidence at the crime scene 6. Transport evidence to lab 7.Create
i- i- i- i- i- i- i- i- i- i- i- i-



two bitstream copies of the evidence 8. Generate MD5 checksum of the
i- i- i- i- i- i- i- i- i- i- i- i-



images 9. Maintain chain of custody 10. Store original evidence in secure
i- i- i- i- i- i- i- i- i- i- i- i-



location 11. Analyze the image copy for evidence 12. Prepare a forensic
i- i- i- i- i- i- i- i- i- i- i- i-



report 13. Submit a report to client 14. Testify in course as an expert
i- i- i- i- i- i- i- i- i- i- i- i- i- i-



witness

,Computer Forensics A set of methodological procedures and
i- i-i- i- i- i- i- i- i- i-



techniques that help identify, gather, preserve, extract, interpret,
i- i- i- i- i- i- i- i-



document, and present evidence from computers in a way that is legally
i- i- i- i- i- i- i- i- i- i- i- i-



admissible


Cyber Crime i- Any illegal act involving a computing device, network,
i-i- i- i- i- i- i- i- i- i- i-



its systems, or its applications. Both internal and external
i- i- i- i- i- i- i- i-




Enterprise Theory of Investigation (ETI)
i- i- i- i- i-i- i- Methodology for i- i-



investigating criminal activity i- i-




Types of Cyber Crime
i- i- i- i-i- i- Civil, Criminal, Administrative
i- i-




Civil Cases
i- Involve disputes between two parties. Brought for
i-i- i- i- i- i- i- i- i- i-



violation of contracts and lawsuits where a guilty outcome generally
i- i- i- i- i- i- i- i- i- i-



results in monetary damages to the plaintiff
i- i- i- i- i- i-




Locard's Exchange Principle
i- Anyone of anything, entering a crime i- i-i- i- i- i- i- i- i- i-



scene takes something of the scene with them and leaves something of
i- i- i- i- i- i- i- i- i- i- i- i-



themselves behind when they leave. i- i- i- i-




Types of Digital Data
i- i- i- i-i- i- Volatile Data i-




Non-volatile Data i-

, Volatile Data Temporary information on a device that requires a
i- i-i- i- i- i- i- i- i- i- i- i-



constant power supply and is deleted if the power supply is interrupted
i- i- i- i- i- i- i- i- i- i- i-




Non-Volatile Data i- i-i- i- Secondary storage of data. Long-term, persistent
i- i- i- i- i- i-



data.
Permanent data stored on secondary storage devices, such as hard disks
i- i- i- i- i- i- i- i- i- i- i-



and memory cards.
i- i-




Characteristics of Digital Evidence i- i- i- i-i- i- 1. Be Relevant
i- i-




2. Be probative
i- i-




3. Be authentic
i- i-




4. Be accurate
i- i-




5. Be complete
i- i-




6. Be convincing
i- i-




7. Be admissible
i- i-




Admissible evidence Evidence that can be legally and properly
i- i-i- i- i- i- i- i- i- i- i-



introduced in a civil or criminal trial.
i- i- i- i- i- i-




Evidence is relevant to the case
i- i- i- i- i-




Authentic Evidence i- i-i- i- Evidence that is in its original or genuine state.
i- i- i- i- i- i- i- i-




Investigators must provide supporting documents regarding the
i- i- i- i- i- i- i-



authenticity, accuracy, and integrity of the evidence
i- i- i- i- i- i-

The benefits of buying summaries with Stuvia:

Guaranteed quality through customer reviews

Guaranteed quality through customer reviews

Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.

Quick and easy check-out

Quick and easy check-out

You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.

Focus on what matters

Focus on what matters

Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!

Frequently asked questions

What do I get when I buy this document?

You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.

Satisfaction guarantee: how does it work?

Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.

Who am I buying these notes from?

Stuvia is a marketplace, so you are not buying this document from us, but from seller AcademiaExpert. Stuvia facilitates payment to the seller.

Will I be stuck with a subscription?

No, you only buy these notes for $12.49. You're not tied to anything after your purchase.

Can Stuvia be trusted?

4.6 stars on Google & Trustpilot (+1000 reviews)

69052 documents were sold in the last 30 days

Founded in 2010, the go-to place to buy study notes for 15 years now

Start selling
$12.49
  • (0)
Add to cart
Added