In preparing for processing the potential crime/incident scene, I would have my digital forensics team to understand and perform the following tasks: identify for potential digital evidence, understand rules of evidence, prepare for the search and seize digital evidence, and to ensure proper storage/chain of evidence processes are properly documented and followed.
Computers and digital media are progressively involved in unlawful exercises. The computer maybe contraband, products of the crime, an instrument of the offense, or just a storage that holds evidence of the offense. Investigation of any criminal activity may deliver electronic proof. Digital evidence is any proof store or transmitted in an advanced form. As a lead of my team, it is …show more content…
I will ensure my team has a clear understanding and knowledgeable about rules and regulations that are applied to digital evidence. Consistency can help with confirming one work and improving unwavering quality. My team needs to comply with State and Federal rules of evidence, as well as aware of current on latest rulings and directives on processing, gathering, and conceding advanced digital evidence (Luttgens, Pepe, & Mandia, 2014). At the point when dealing with digital evidence, general criminological and procedural standards ought to be applied (Mukasey, Sedgwick, & Hagy, …show more content…
It is critical to precisely recode the area of the scene; the scene itself, the power state (i.e. on or off), computer conditions, storage media, remote network devices, cell phones, internet and network access, and other electronic devices. The investigators should know that digital evidence may be not in a close perimeter to the computers or different devices (Mukasey, Sedgwick, & Hagy, 2001). Digital evidence have to be handled carefully to protect the integrity of the evidence in both physical device and the data it contains. Chain of Custody form is an important form serving as identifies the evidence, identifies who has handled the evidence, records MD5 and SHA-1 hash value, and lists dates and times the evidence was handled. Moreover, evidence bags also include labels or evidence forms my team can use to document the evidence. All steps taken to acquire the data or changes of the evidence must be documented, including what and why the changes are made. One may need to prove the integrity of the evidence in a court of law (Ryder,
Computers and digital media are progressively involved in unlawful exercises. The computer maybe contraband, products of the crime, an instrument of the offense, or just a storage that holds evidence of the offense. Investigation of any criminal activity may deliver electronic proof. Digital evidence is any proof store or transmitted in an advanced form. As a lead of my team, it is …show more content…
I will ensure my team has a clear understanding and knowledgeable about rules and regulations that are applied to digital evidence. Consistency can help with confirming one work and improving unwavering quality. My team needs to comply with State and Federal rules of evidence, as well as aware of current on latest rulings and directives on processing, gathering, and conceding advanced digital evidence (Luttgens, Pepe, & Mandia, 2014). At the point when dealing with digital evidence, general criminological and procedural standards ought to be applied (Mukasey, Sedgwick, & Hagy, …show more content…
It is critical to precisely recode the area of the scene; the scene itself, the power state (i.e. on or off), computer conditions, storage media, remote network devices, cell phones, internet and network access, and other electronic devices. The investigators should know that digital evidence may be not in a close perimeter to the computers or different devices (Mukasey, Sedgwick, & Hagy, 2001). Digital evidence have to be handled carefully to protect the integrity of the evidence in both physical device and the data it contains. Chain of Custody form is an important form serving as identifies the evidence, identifies who has handled the evidence, records MD5 and SHA-1 hash value, and lists dates and times the evidence was handled. Moreover, evidence bags also include labels or evidence forms my team can use to document the evidence. All steps taken to acquire the data or changes of the evidence must be documented, including what and why the changes are made. One may need to prove the integrity of the evidence in a court of law (Ryder,