Retrieved from https://studentshare.org/law/1618754-quiz-1
https://studentshare.org/law/1618754-quiz-1.
Malware: A general term used to describe a program or piece of code that is generally harmful to the normal use or operation of a computer system.
Forensic suite: The general phrase used to describe collections of digital forensic tools or single tools that enable multiple analyses of digital evidence; examples include Guidance Software’s Encase Forensic and Technology Pathway’s ProDiscover Basic.
Bit-stream copy (or forensic image): a bit-by-bit duplicate of data on the original or source medium, created via a process called “acquisition” or “imaging”.
Repeatability: a concept used to describe the ability to get the same results each time from the same test or examination directed at the same data set or piece of evidence.
Evidence custody (or property custody) document A printed form indicating who has signed out and been in physical possession of evidence. Many agencies also use this form to provide a physical description of evidence for later identification.
Tool belt approach: a concept used to describe a varied approach to a digital forensic examination, whereby multiple hardware or software solutions are chosen (regardless of brand name) because they are best suited to a particular task.
Harsh value: A process used to determine that a forensic image is an exact, bit-by-bit copy of the source media.
Verification: an expression (often composed of hexadecimal values) derived from the application of a specific mathematical algorithm to a particular set of data, which can be used to verify data integrity or identify specific files.
Forensic soundness(or forensically sound): A general term used to describe emphasizing documenting, processing, and analyzing digital evidence (in the context of computer crime and security) in such a way as to preserve its usefulness in any potential litigation or criminal investigation.
Read More