Question: Please answer the following bulleted questions with at least one paragraph for each response. Please see the corresponding E-Activity when necessary.
Forensic Tool Testing:
• Determine the importance of forensic tool testing and validation and if this is a critical component of your forensic operations. Justify your answer.
• From the first e-Activity, discuss the advantage you believe the Computer Forensics Tool Testing (CFTT) provides for system forensics specialists and law enforcement agencies. Determine if the testing of tools is more effective and trustworthy being that it is a function of the National Institute of Standards and Technology (NIST). Decide if the testing of tools by NIST makes the testing more unbiased than if it were performed in the private sector. Provide a rationale with your response.
E-Activity:Go to the Computer Forensics Tool Testing (CFTT) Program Website. Review the information regarding tool testing contained within the Website.
Operating System Forensics:
• Compare and contrast the forensic processes when dealing with Windows-based, Linux-based, and Macintosh-based systems. Explain the challenges of each of these operating systems in regard to system forensics and determine which of these you consider to be the most challenging and why.
• From the second e-Activity, discuss the tool's primary uses, strengths and weaknesses, competing products, costs, system requirements, and whether military, law enforcement and / or private corporations use the tool. Decided whether or not you would consider utilizing this tool as a system forensics specialist. If you would utilize the tool, provide a scenario where it would assist you in an investigation. If you would not utilize the tool, justify your reason why.
E-Activity-Use the Internet to research at least one commonly used Linux-based system forensics software tool. Research the tool's primary uses, strengths, weaknesses, costs, system requirements, and who uses the tool.
Validation:
• Analyze the purpose of validating forensic data and determine why this is a necessary component of the investigation and analysis process.
• As a system forensics manager, justify the importance of validation and determine the best method to use.
Graphic File Evidence:
• Evaluate the importance of graphic files to a digital investigation. Provide a scenario where a graphic file would be considered an invaluable piece of evidence.
• From the e-Activity, briefly summarize the case or investigation that involved a graphic file(s) as a critical piece of evidence. Determine if the case or investigation would have been hampered without this piece of evidence and provide a rationale with your response.
E-Activity:Use the Internet to research and select at least one case or investigation where a graphic(s) file was used as a critical piece of evidence.