Digital Forensics Investigation
Imagine you are a digital forensics investigator hired by a corporation to secure and analyze a crime scene involving a misuse of company computer systems by an employee suspected of selling proprietary data to a foreign government over the course of several years.
Items that must be secured and analyzed involve running computer systems, mobile devices, memory cards, tablets, and optical storage such as CDs and DVDs. In addition, there are a number of computer hard drives that have been discarded in a dumpster outside the building that may contain digital evidence.
Explain in detail the high-level methodology used in digital forensic investigations.
Explain the evidence collection process using this scenario and being mindful that there are live systems involved.
Discuss the importance of a secure chain of custody.
