Access Millions of academic & study documents

Forensics v03 lab01 aw 2

Content type
User Generated
Showing Page:
1/1
Lab #1 - Assessment Worksheet
Applying the Daubert Standard to Forensic Evidence
Course Name and Number: CYBER 470
Student Name:
Instructor Name:
Lab Due Date: Week 1
Lab Assessment Questions & Answers
1. Why is the unallocated space of a Windows system so important to a
forensic investigator? This space can contain deleted and created files.
2. From where were the badnotes1.txt and badnotes2.txt files recovered?
Root/documentsandsettings/administrator/desktop
3. What is the INFO2 file used for? used for? INFO2 was used for the MD5
hash verification
4. How do you generate a hash file in FTK Imager? Right click the file and
click Export File Hash
5. What was the MD5 hash value in 043458.csv, the deleted e-mail file?
4d88b734fef2fc0ea51077c18e37cd20
6. What is the Daubert standard? Daubert standard is a rule of evidence for
the expert witness' testimony.
7. Why must a forensic investigator be familiar with emerging technologies?
They must be familiar with the technologies because they need to make
sure the actions they take are legal in court.

Sign up to view the full document!

lock_open Sign Up
Unformatted Attachment Preview
Lab #1 - Assessment Worksheet Applying the Daubert Standard to Forensic Evidence Course Name and Number: CYBER 470 Student Name: Instructor Name: Lab Due Date: Week 1 Lab Assessment Questions & Answers 1. Why is the unallocated space of a Windows system so important to a 2. 3. 4. 5. 6. 7. forensic ...
Purchase document to see full attachment
User generated content is uploaded by users for the purposes of learning and should be used following Studypool's honor code & terms of service.
Studypool
4.7
Indeed
4.5
Sitejabber
4.4