Archives

Chapter 1 Foundations of Digital Forensics Objectives On completion of this chapter, the student will – Recognize that there will be a digital component in nearly every crime. – Be able to list some of the ways criminals use technology. […]

Chapter 10 Violent Crime and Digital Evidence On completion of this chapter, the student will: – Be aware that violent crime does not occur in an evidentiary vacuum. Recognize the role – Recognize that mobile devices are a potential source […]

Chapter 11 Digital Evidence as Alibi On completion of this chapter, the student will: – Recognize that key pieces of information in an alibi are: time and location. – Be aware of potential sources for time and location information. – […]

Chapter 12 Sex Offenders on the Internet On completion of this chapter, the students will: – Be aware of the reasons why the Internet is attractive to sex offenders. – Recognize that sexual abuse and illegal pornography existed long before […]

Chapter 13 Computer Intrusions On completion of this chapter the student will: – Recognize that the value of digital data has made it the target. – Be aware of the reasons that criminals break into computers. – Be aware of […]

Chapter 14 Cyberstalking On completion of this chapter, the student will: – Recognize that fixation is a prominent feature of cyberstalking. – Be aware that cyberstalking may be accompanied by more traditional, physical forms. – Recognize that cyberstalking is based […]

Chapter 15 Computer Basics for Digital Investigators On completion of this chapter, the student will: – Be aware of the process that occurs when a computer boots. – Recognize how data is stored on a magnetic media. – Recognize the […]

Chapter 16 Applying Forensic Science to Computers On completion of this chapter the student will: – Be able to apply those forensic methodologies discussed earlier in this book to stand- alone Computer Systems. The methodologies include: o Preparation o Survey […]

Chapter 17 Digital Evidence on Windows Systems On completion of this chapter, the student will: – Be aware that Windows-based systems will comprise the majority of cases. – Recognize that powerful forensic tools are not a substitute for knowledge and […]

Chapter 18 Digital Evidence on UNIX Systems On completion of this chapter, the student will: – Recognize that most UNIX systems information is available for review. – Be aware that the openness of UNIX systems presents both opportunities and challenges […]

Chapter 19 Digital Evidence on Macintosh Systems On completion of this chapter, the student will: – Be aware of how to HFS (and HFS Plus) manage folders and files. – Recognize the unique features of HFS. – Be aware of […]

Chapter 2 Language of Computer Crime Investigation Resources The following organizations with related resources are mentioned in this chapter. RESOURCE SOURCE DESCRIPTION DFRWS http://www.dfrws.org Digital Forensics Research Workshop. ENFSI http://www.enfsi.org European Forensic IT Working Group. FLETC http://www.fletc.gov Provides computer forensic […]

Chapter 20 Digital Evidence on Mobile Devices On completion of this chapter, the student will: – Recognize that the use of cell phones and smart phones is an integral part of modern society. – Recognize that mobile devices can contain […]

Chapter 21 Network Basics for Digital Investigators – Be aware of the reasons that digital investigators have to have a thorough understanding of networks. – Be aware of the hardware and protocols that constitute a network. – Be aware of […]

Chapter 22 Applying Forensic Science to Networks On completion of this chapter, the student will: – Be aware of the need to gather intelligence about the target systems prior to the actual search. – Recognize the similarity between the intelligence […]

Chapter 23 Digital Evidence on the Internet On completion of this chapter, the student will: – Be aware of the role of the Internet in criminal investigations. – Recognize that Internet Services retain information about people and organizations. – Be […]

Chapter 24 Digital Evidence at the Physical and Data-Link Layers On completion of this chapter, the student will: – Be aware of some of the tools available to exploit the physical and data-link layers of a network. – Recognize and […]

Chapter 25 Digital Evidence at the Network and Transport Layers On completion of this chapter, the student will: – Be aware of various network and transport layer protocols and how criminals use them. – Be aware of the components that […]

Chapter 3 Digital Evidence in the Courtroom Objectives On completing this chapter, the student will: – Be aware of the difference between concerns of the law and scientific knowledge. – Be aware of the concerns of the court in regard […]

Chapter 4 Cybercrime Law: A United States Perspective Resources The following useful resources are related to this chapter: RESOURCE SOURCE DESCRIPTION US DOJ http://www.cybercrime.gov/ US DOJ cybercrime resources COE http://www.coe.int/Files/Cybercrime COE cybercrime resources Objectives On completion of this chapter, the […]

Chapter 5 Cybercrime Law: A European Perspective Objectives On completion of this chapter, the student will: – Be aware of differences between super-national and national legal frameworks. – Recognize the progression of cybercrime legislation in Europe. – Be able to […]

Chapter 6 Conducting Digital Investigations Objectives On completion of this chapter, the student will: – Be able to discuss various digital investigation process models. o Physical model o Staircase model – Recognize that there are other activities inherent in conducting […]

Chapter 7 Handling a Digital Crime Scene Objectives On completion of this chapter, the student will: – Understand that crime scene investigation is the first, most crucial step in the forensic process. – Be aware of sources for digital crime […]

Chapter 8 Investigative Reconstruction with Digital Evidence Objectives On completion of this chapter, the student will: – Be aware that crime is not always committed in a straightforward manner. – Recognize that investigative reconstruction refers to the systematic process of […]

Chapter 9 Modus Operandi, Motive, and Technology On completion of this chapter, the student should: –Be aware that introduction of any new technologies may have unintended consequences. – Recognize that the technology is not ev – a. Power reassurance b. […]