Complete the following questions below in detail. Please discuss thoroughly and substantively in your post.
It is critical that computer forensic examiners understand processes such as capturing volatile data, recognizing and collecting digital evidence, analyzing the evidence once it is collected, etc.; however, what I want you to focus on this week is why and how the processes are designed to identify, seize, collect, preserve, and analyze digital evidence, and how they relate to the criminal justice process. Digital evidence must not just be simply collected (e.g., picked up and put in a bag), but procedures must be put in place to preserve the evidence so the defense cannot raise reasonable doubt (in the criminal case) about the integrity or provenance of the evidence.
1) Describe at least 5 steps in a process to collect digital evidence to the time you testify that you consider important. Please explain why they are important.
2) You are a witness and I am asking you the following question – please answer thoroughly as if you are testifying in court on the witness stand. “Upon entering the room where the computer was located, what was the first thing you did?”
3) Continue your testimony by answering – “After seizing the computer evidence, explain what you did with it?”
Sample Solution
