ISM4324 Lesson 4 Assignment Complete Solution

Question: #952

Instructions: There are multiple parts to this assignment. Carefully read each section and type your answer in the space provided. Complete each part of this Homework Assignment to receive full credit.

Part 1: Investigation Web Sites
Chapter 4 in the textbook contains links to several web sites which are important to understanding computer investigations. In this section, list the web sites discussed in the chapter and include their Internet links along with a brief description of what is contained at each of these sites.

Place your response to Part 1 here.

Part 2: Acquisition Tools (Case Project 4-1)
Your supervisor has asked you to research current acquisition tools. Using your preferred Internet search engine and the vendors listed in this chapter, prepare a report containing the following information for each tool and stating which tool you would prefer to use:
•Computer forensics vendor name
•Acquisition tool name and latest version number
•Features of the vendor's product
With this data collected, prepare a spreadsheet (table) listing vendors in the rows. For the column headings, list the following features:
•Raw format
•Proprietary format
•AFF format
•Other proprietary formats the tool can read
•Compression of image files
•Remote network acquisition capabilities
•Method used to validate (MD5, SHA-1, and so on)

Place your response to Part 2 here.

Part 3: My Investigation (Case Project 4-5)
You're investigating a case involving a 2 GB drive that you need to copy at the scene. Write one to two pages describing three options you have to copy the drive accurately. Be sure to include your software and media choices.

Place your response to Part 3 here.

Solution: #956

ISM4324 Lesson 4 Assignment Complete Solution

Advanced Forensic Format (AFF). File extensions include .afd for segmented image files and .afm for AFF metadata. Because AFF is open source, compu...