Term
| What is Digital Forensics? |
|
Definition
| Requiring knowledge of the law and computer science, the collection and analysis of computer data, in way that is admissible as evidence in a court of law. |
|
|
Term
| Why is Digital Forensics Important? |
|
Definition
| A majority of criminals leave valuable evidence on their computers and criminal investigations are becoming increasingly difficult. |
|
|
Term
| What is admissible digital evidence? |
|
Definition
| Digital evidence that a qualified investigator, legally obtained, unaltered, from a certain source and has a bearing on the event being investigated. |
|
|
Term
| Define Internal Investigations |
|
Definition
| Violation of company policies and guidelines. |
|
|
Term
| Define Civil Investigations |
|
Definition
| In case of Intellectual Property Rights risk, company’s network security breach, unauthorized use of company resource. |
|
|
Term
| Define Criminal Investigations |
|
Definition
| Misuse or abuse of company assets, falsification of data, discrimination, harassment, and similar matters likely to involve litigation not subject to the same “search and seizure” rules and Fourth Amendment issues. |
|
|
Term
| What is Digital Forensics Hardware? |
|
Definition
| Well tested and accepted hardware tools used for incident response and forensic analysis. |
|
|
Term
| What are the five elements of admissible digital evidence? |
|
Definition
Authenticity
Integrity
Relevance
Reliability
Legally Obtained |
|
|
Term
| Examples of Digital Forensics Hardware |
|
Definition
Forensics Computers
Write-Blocking Devices
Imaging Devices (Disk Duplicator)
Data Wiping Devices
Encryption Hardware |
|
|
Term
|
Definition
| A log kept of every action taken against evidence that is critical for evidence admissibility. |
|
|
Term
| How can computers be involved in crime? |
|
Definition
| As a target or instrument of crime. |
|
|
