Academic Integrity: tutoring, explanations, and feedback — we don’t complete graded work or submit on a student’s behalf.

1. Distinguish between Digital Investigations and Digital Forensics 2. What are

ID: 2573940 • Letter: 1

Question

1. Distinguish between Digital Investigations and Digital Forensics 2. What are some characteristic of digital forensics experts and what are things they do? 3. List and discuss 5-7 items that might be seized and examined in digital forensics (e.g 4. 5. 6. documents or emails). Identify and discuss matters related to evidence in digital forensics. Define tracing illicit transactions Summarize the four steps or processes in tracing illicit transactions (Collect Information, Profile the Subject, Review Information of Leads, Trace the Illicit Transaction)

Explanation / Answer

Ans 1 : Distinction Between Digital Investigation & Digital Forensics on the basis of key points :

Digital Investigation :A digital investigation is a process to answer questions about digital states and events. The basic digital investigation process frequenty occurs by all computer users when they, for example, search for a file on their computer. A digital investigation is a process to answer questions about digital states and events. The basic digital investigation process frequenty occurs by all computer users when they, for example, search for a file on their computer.

Digital Forensic :  The Digital forensics are used to answer a more limited set of questions than a general investigation. Physical forensics is used to "identify" a substance, which determines the class of the substance. A digital forensic investigation is a special case of a digital investigation where the procedures and techniques that are used will allow the results to be entered into a court of law.

Ans 2 : A digital forensic expert identifies and collects evidences form electronic devices and examines them to complete the examination and find a solution over it. There is an exhaustive list of duites and responsibilites of a digital forensic expert which descibes his characteristics and the work he does. Forensics Experts currently work for large corporations, law enforcement, legal firms and private consulting firms. Global firms have their own computer forensics units. He is a digital expert is a digital detective, harvesting and analyzing evidence from computers, networks and other forms of data storage devices. Following are the characteristics of expert.

He conducts data breach and security incident investigations.

He recovers and examines data from computers and electronic storage devices.

He dismantles and rebuild damaged systems to retrieve lost data.

He Identifies additional systems/networks compromised by cyber attacks.

He compiles evidence for legal cases.

He drafts technical reports, write declarations and prepare evidence for trial.

He give expert counsel to attorneys about electronic evidence in a case.

He sdvises law enforcement on the credibility of acquired data.

He provide expert testimony at court proceedings.

He trains law enforcement officers on computer evidence procedures.

He keeps abreast of emerging technologies, software and methodologies.

He stays proficient in forensic, response and reverse engineering skills.

Ans 3 : Computer documents, emails, text and instant messages, transactions, images and Internet histories are examples of information that can be gathered from electronic devices and used very effectively as evidence. This are the items that can be examined in digital forensics examination.

Ans 4 : Computers are used for committing crime, and, thanks to the progressing science day by day of digital evidence forensics, law enforcement now uses computers to fight crime. Digital evidence is information stored or transmitted in binary form. It can be found on a computer hard drive, a mobile phone, a personal digital assistant (PDA), a CD, and a flash card in a digital camera, among other places. Digital evidence is commonly associated with electronic crime, or e-crime, such as child pornography or credit card fraud. However, digital evidence is now used to prosecute all types of crimes, not just e-crime. In an effort to fight e-crime and to collect relevant digital evidence for all crimes, law enforcement agencies are incorporating the collection and analysis of digital evidence, also known as computer forensics. Law enforcement agencies are challenged by the need to train officers to collect digital evidence and keep up with rapidly evolving technologies such as computer operating systems.

Inshort digit evidence in nothing but the information stored in binary form in any of the electronic devices used by us in our day to life , which could be used to trace out a incident or crime at that time of investigation. It adds to the worthfullness and reliance on any fact to investiagte , solve and come to an conclusion reagarding any issue