An investigator would like to take a forensic "image" a suspect's hard disk drive. What is the primary goal in obtaining data from a HDD? What tools can the investigator use to achieve this goal?

What will be an ideal response?


Answer should include points such as the following:
The primary goal in obtaining data from a HDD is to do so without altering even one bit of data.
A Message Digest 5 (MD5)/Secure Hash Algorithm (SHA) takes a "fingerprint" of a hard disk drive (HDD) before and after forensic imaging. A forensic computer examiner would run such an algorithm to demonstrate that the forensic image recovered is all-inclusive of the original contents and that nothing was altered in the process.

Criminal Justice

You might also like to view...

What technology has allowed precinct commanders to analyze how crime is clustered geographically in their precinct and how patrol officers are being deployed?

A. Drones B. CompStat C. Automated license plate recognition D. Crime mapping

Criminal Justice

________ holds that a person can defend a third party only under circumstances and to the degree that the third party could act on his or her own behalf

A) An imperfect self-defense B) The apparent danger rule C) The castle exception D) The alter ego rule

Criminal Justice

What constitutes deliberate elicitation? What constitutes a custodial interrogation?

What will be an ideal response?

Criminal Justice

Under the Batson ruling, the defendant must prove that the prosecution's use of a peremptory challenge was racially motivated. Doing so requires a number of legal steps. Which of the following is not one of these steps? a. First, the defendant must make a prima facie case that there has been discrimination during venire. b. The defendant must show that he or she is a member of a recognizable

racial group and that the prosecutorhas used peremptory challenges to remove members of this group from the jury pool. c. The defendant must show that these facts and other relevant circumstances raise the possibility that theprosecutor removed the prospective jurors solely because of their race. d. A defendant may contest race-based peremptory challenges only if the defendant is not of the same race as the excluded jurors.

Criminal Justice