Organizational Forensics

MIS 5170 - Section 002 - Larry Brandolph

Organizational Forensics

MIS 5216.701 ■ Fall 2019 ■ Paul Warner

Week 2: Storage Formats, Acquisitions, Digital Evidence and Forensics Investigations

Week Objectives

  • Understanding storage formats
  • Understanding acquisition planning, methods, tools and validation
  • Explain guidelines, rules and procedures for controlling, processing and storing digital evidence and crime scenes.

PowerPoint

http://community.mis.temple.edu/mis5216sec701fall2019/files/2019/09/gcfi6e_ppt_ch03.pptx

http://community.mis.temple.edu/mis5216sec701fall2019/files/2019/09/gcfi6e_ppt_ch04.pptx

Reading Units

Chapter 3 & Chapter 4

Independent Labs

  • Chapter 3: Hands-on Project 3-1
  • Chapter 3: Hands-on Project 3-2
  • Chapter 4: Hand-on Project 4-3

Assignment

Chapter 4: Case Project 4-3

Your spouse works at a middle school and reports rumors of a teacher, Zane Wilkens, molesting some students and taking illicit pictures of them.  Zane allegedly viewed these pictures in his office.  Your spouse wants you to take a disk image of Zane’s computer and find out whether the rumors are true.  Write a summary outlining how you would tell your spouse and school administration to proceed.  Also, explain why walking into Zane’s office to acquire a disk image wouldn’t preserve the integrity of the evidence

Discussion Board

In this week discussion you will be discussion the following:

  1. Why validation of data is very important
  2. How would you determine the best acquisition method in a situation you may encounter as a forensic technician
  3. Types of storage formats and which will be more appropriate at a crime scene for fast data transfers
  4. What is your opinion on the how a forensics investigation should take place, give an example if necessary

Topics and Required Reading

Required Viewing