week 24 - forensics: investigation 101

Question 1

what is evidence?

Answer 1

information/material used to refute or support an allegation/belief

Question 2

what are the 2 categories of evidence?

Answer 2

spoken evidence verbal

physical evidence
tangible

Question 3

ASCII ?

Answer 3

american standard for information interchange - assigns numerical value to letters and characters

Question 4

hexadecimal (base 16 system)

Answer 4

0-9 then letters a-f - thus 16 different values instead of 10 (decimal 0-15)

Question 5

forensic readiness?

Answer 5

planning for cyber security attacks- aim to preserve relevant digital data

Question 6

document, document, document

preservation

Answer 6

detailed, meticulous record keeping is a core skill for the digital forensic investigator

Question 7

contemporaneous notes

Answer 7

notes taken at the time of the event

Question 8

CoC

Answer 8

chain of custody, every effort must be made to preserve evidence

CoC is also the name of the form - change of custody of location