Problem 1: What are the differences between a static acquisition and a live acquisition? Give an example of when each would be used in a forensic investigation.
Problem 2: What is the importance of validating digital evidence? Suppose you were testifying to a jury. How would you explain in layman's terms that the evidence has been validated?