Digital Forensics Unit 1

What is Digital Forensic?

• Process of using scientific knowledge in analysis and presentation of evidence in court

• The application of computer science and investigative procedures for a legal purpose involving the analysis of digital evidence after proper search authority, a chain of custody, validation with mathematics, use of validated tools, repeatability, reporting, and possible expert presentation

• A process where we develop and test hypotheses that answer questions about digital events

• Use of science or technology in the investigation and establishment of the facts or evidence in a court of law

What are the difficulties in handling Digital Evidence?

• Easy to destroy

• Easy to sustain

  
  

• Hard to get

• Both A and C

Which of the following is FALSE

• The digital forensic investigator must maintain absolute objectivity.

• It is the investigator’s job to determine someone’s guilt or innocence.

• The investigator must maintain strict confidentiality, discussing the results of an investigation on only a “need to know”

• It is the investigator’s responsibility to accurately report the relevant facts of a case.

Which World organization accredited labs in the world of forensics?

• APIOS

• AKULD

• ACSLD

• None of these

Which of the following is NOT the focus of digital forensic analysis?

• Enhancement

• Authenticity

• Proving

• Comparison

What is the primary goal of digital forensic analysis?

• To recover lost data

• To identify and preserve digital evidence

• To enhance the performance of digital devices

• To create digital backups

Which of the following is a key principle of digital forensics?

• Chain of custody must be maintained

• Data should be altered during analysis

• Only authorized personnel can access the evidence

• All digital evidence is admissible in court

What is the significance of maintaining a chain of custody in digital forensics?

• It is not necessary for digital evidence

• It helps in data recovery

• It allows for faster analysis

• It ensures the integrity of the evidence

Which of the following tools is commonly used in digital forensic investigations?

• Photoshop

• EnCase

• Microsoft Word

• Excel

What type of evidence can be collected during a digital forensic investigation?

• Physical evidence only

• Data from cloud storage

• Both digital and physical evidence

• Only data from hard drives