Term
| List Elements of a Search Warrant |
|
Definition
Clearly State What You Are Looking For.
Clearly State the area in which you are authorized to search.
Be signed by judge. |
|
|
Term
| 18 US Code 2703 (Search Warrant) |
|
Definition
| Required disclosure of customer communication or records, not stored on a user's local machine, but in the cloud. |
|
|
Term
|
Definition
| Officer can take evidence if the Officer is legally present, can legally access the evidence and has probable cause. |
|
|
Term
| Qualities of a Private Investigation |
|
Definition
Not subject to same search and seizure laws
Normally focused on someone abusing company system. |
|
|
Term
| Digital Forensics Investigation |
|
Definition
| Process that develops and test hypotheses to answer questions about already occurred digital events. |
|
|
Term
| List the Elements To Evidence Acquisition |
|
Definition
Identify
Isolate
Label
Record
Collect
Maintain Integrity |
|
|
Term
| List The Elements to Examination |
|
Definition
Identify
Use Appropriate Tools To Extract
Maintain Integrity |
|
|
Term
| What is the purpose of examining results? |
|
Definition
| To generate useful answers to the questions presented in previous phases. |
|
|
Term
| Digital Investigation Process Model |
|
Definition
Preservation
Survey (Light Search)
Documentation
Search & Collection (In-Depth Search)
Reconstruction (Develop Theories) |
|
|
Term
| Evidence Handling Workflow |
|
Definition
| Identify > Photograph > Document > Package > Store > Destruction or Return |
|
|
Term
| First Thing To Do At The Scene Of The Crime |
|
Definition
Determine Who Is In Charge
Identify What Is The Crime Scene
Figure Out What Area You Are Allowed To Answer |
|
|
Term
| Steps To Securing The Scene |
|
Definition
Make Sure That Everything Is Safe
Integrity is Second to Safety
Secure The Evidence After You Have Ensured Safety |
|
|
Term
| 2 Ways to turn off a computer |
|
Definition
| Pull the plug or shutdown the computer |
|
|
Term
| If information or activity on screen indicates that data is being deleted or overwritten, what should you do? |
|
Definition
|
|