Forensic Final

Question 1

Traditional Discovery

Answer 1

Production of electronic evidence
Document Request
Subpoena
Request from third parties

Question 2

Computer Forensics

Answer 2

Involves the preservation, identification, extraction, documentation and interpretation of electronic data.
Involves various types of computer storage devices.
Performed in such a manner that the results are reproducible by another computer forensic expert who, following the same steps, reaches the same conclusions.

Question 3

Electronic evidence is:

Answer 3

E-mail
Calendars
Correspondence
Spreadsheets
Databases
Slide shows
Back-up files
Temporary files
Deleted files
Firewall Logs
Can be found:
Hard Drives
Internet service providers
Corporate servers
Individual’s home
Warehouses
Thumb drives
Tapes
CD/DVD
Car trunks
Computers in Autos
Flash Memory
Cell Phones