What is the most important thing that an investigator must consider when collecting evidence during a digital forensic investigation and why is this important?

What will be an ideal response?


The investigator must make no changes to the evidence. The emphasis on making no change whatsoever to the evidence during a digital forensic investigation may seem overstated, but in fact it is justified by the potentially serious consequences of the investigation. Digital forensic findings can cost (or save) an organization millions of dollars, can lead to employees being fired, and, if used in criminal proceedings, can lead to a person being deprived of freedom or life.

Trades & Technology

You might also like to view...

Electronic air cleaners generally have ____.

A. ionizing sections B. charcoal filters C. prefilters D. All of the above.

Trades & Technology

?What type of grinding disk must be used to feather the edge of tack welds?

A. ?A standard grinding stone as long as the root opening has not decreased due to the tack weld shrinkage. B. ?A thin grinding disk. C. ?A new disk so it can reach all the way down into the groove. D. ?A cupped disk so it is easier to work around the curve of the pipe.

Trades & Technology

When dealing with combined operations of solving math problems, add or subtract from left to right.

Answer the following statement true (T) or false (F)

Trades & Technology

How does the reversing valve switch a heat pump between heating and cooling modes?

a. It reverses refrigerant flow through the compressor. b. It causes both check valves to allow refrigerant flow to the indoor coil. c. It causes both metering devices to meter refrigerant. d. It reverses refrigerant flow through the indoor and outdoor coils.

Trades & Technology