Top Posters
Since Sunday
e
5
R
5
e
4
4
d
4
o
3
p
3
t
3
3
m
3
p
3
m
3
New Topic  
meikunn2565 meikunn2565
wrote...
Posts: 461
5 years ago

You have been called to the scene of a crime. One of the rooms on the premises has been set up as a small home office. The computer is running, You have a warrant to seize the computer, so your team gets ready to pack it up and haul it away. What is the proper approach?



▸ Leave the device running until a determination is made whether or not to capture live memory.

▸ Pull the plug. You want to keep temporary files intact.

▸ The lead investigator has determined there will be no need for live memory capture. So you gracefully shut the machine down in order to avoid corrupting the OS.

▸ You never move the computer system until after it has been imaged.
Textbook 
Digital Archaeology: The Art and Science of Digital Forensics

Digital Archaeology: The Art and Science of Digital Forensics


Edition: 1st
Author:
Read 68 times
2 Replies
Replies
Answer verified by a subject expert
urbacoreurbacore
wrote...
Posts: 367
5 years ago
Sign in or Sign up in seconds to unlock everything for free
More solutions for this book are available here
1

Related Topics

meikunn2565 Author
wrote...
5 years ago
Smart ... Thanks!
New Topic      
Explore
Post your homework questions and get free online help from our incredible volunteers
  934 People Browsing
Related Images
  
 651
  
 319
  
 3456