Dissertation Writers: Identify at least 1 challenge to acquiring network data over computer data.
As a forensic investigator, provide two examples, one of a corporate investigation and one of a criminal investigation, in which you would be asked to investigate. Where would the evidence supporting each of the cases in your example be likely to reside?
Discuss how capturing a bit-stream image differs from simply copying the contents of a suspect’s hard drive to an evidence drive. What information would be present in a bit-stream image that would not be present if you just copied the drive?
Identify at least 1 challenge to acquiring network data over computer data.
Describe 4 different ways that a criminal can hide data (think anti-forensics, too). How would you find each of these in your investigation?