Top Posters
Since Sunday
c
5
j
5
a
5
L
5
f
5
j
5
D
4
k
4
y
4
t
4
h
4
l
4
New Topic  
meikunn2565 meikunn2565
wrote...
Posts: 461
5 years ago

You have been called to the scene of a crime. One of the rooms on the premises has been set up as a small home office. The computer is running, You have a warrant to seize the computer, so your team gets ready to pack it up and haul it away. What is the proper approach?



▸ Leave the device running until a determination is made whether or not to capture live memory.

▸ Pull the plug. You want to keep temporary files intact.

▸ The lead investigator has determined there will be no need for live memory capture. So you gracefully shut the machine down in order to avoid corrupting the OS.

▸ You never move the computer system until after it has been imaged.
Textbook 
Digital Archaeology: The Art and Science of Digital Forensics

Digital Archaeology: The Art and Science of Digital Forensics


Edition: 1st
Author:
Read 69 times
2 Replies
Replies
Answer verified by a subject expert
urbacoreurbacore
wrote...
Posts: 367
5 years ago
Sign in or Sign up in seconds to unlock everything for free
More solutions for this book are available here
1

Related Topics

meikunn2565 Author
wrote...
5 years ago
Smart ... Thanks!
New Topic      
Explore
Post your homework questions and get free online help from our incredible volunteers
  726 People Browsing
Related Images
  
 1192
  
 1608
  
 301
Your Opinion
Which 'study break' activity do you find most distracting?
Votes: 820