Discussion I:
When choosing the components for a forensic workstation there are many elements to consider including hardware, software, and peripherals. However, we cannot simply go to the local big box computer store to buy our forensic workstation.
Find resources to help one build a forensic workstation. When discussing your findings make sure to explain why you chose the items you put forth.
Discussion II:
Not only is conducting an investigation important, but presenting the evidence is even more important. If that presentation is not understood, then it will be rejected. Experts are educators for the courts.
Write a two paragraph description of hashing that a non-technical user could understand and Discussion it for your classmates to critique.
Discussion III:
Since we have so many different ways to produce a forensically sound image, why do you think we need more than one? Is there some advantage of one over another?
What are the advantages of hardware solutions versus software solutions?
Discussion IV:
Network forensics is considered a very hard problem for a number of reasons:
First, the general anonymity of users on the Internet makes is extremely difficult to determine who a suspect is.
Second, the fact that international borders make it difficult to determine jurisdiction on the Internet, it is sometimes impossible to backtrack all the way form a victim to a perpetrator.
Third, logs are not kept forever, so if efforts are not made relatively quickly, they may be erased.
What can we do in forensics to speed up the process of collecting data? Hypothesize a solution knowing what you know about network data collection.
The response should include a reference list. One-inch margins, Using Times New Roman 12 pnt font, double-space and APA style of writing and citations.