Chfi v9 - Study guides, Class notes & Summaries

Rules of Forensic Investigation - CORRECT ANSWER Safeguard the integrity of the evidence and render it acceptable in a court of law. The forensic examiner must make duplicate copies of the original evidence. The duplicate copies must be accurate replications of the originals, and the forensic examiner must also authenticate the duplicate copies to avoid questions about the integrity of the evidence. Must not continue with the investigation if the examination is going to be beyond his or her k...

Quantitative Risk Analysis - ANSWER-- Computer Forensics - ANSWER-A set of methodological procedures and techniques that help identify, gather, preserve, extract, interpret, document, and present evidence from computers in a way that is legally admissible Cyber Crime - ANSWER-Any illegal act involving a computing device, network, its systems, or its applications. Both internal and external Enterprise Theory of Investigation (ETI) - ANSWER-Methodology for investigating criminal activity ...