Essays on Digital Evidence

A branch of forensic science that includes recovering and investigating materials of the digital devices especially when there is a crime committed using computers. Analyzing a crime is the most important factor in digital forensics before arriving at a conclusion. During the analysis process, the most critical function is to validate the evidence. Analysis of forensics and digital evidence depends on the type of investigation involved, the amount of data that will be processed during investigation, court orders, company policies and search warrants. Digital forensic analysis involves locating and recovering particular materials that eases the investigation process at a ...

French criminalist Edmond Locard is credited with establishing the “Exchange Principle”, which states in relevant part that a criminal offender necessarily leaves something at the crime scene, that if discovered will or can be used to identify him (Forensics). Nowhere is this both truer and less accurate than in the perpetration of crimes in a digital era. The increasing integration of technology into every facet of life and they myriad ways that people, both law abiding and criminally deviant, make use of technology has provided law enforcement authorities with a number of advantages, as well as more than a ...

Digital forensics is of great importance when it comes to investigation and law. This is the acquisition, analysis and presentation of evidence to courts through a scientific collection of the same. When proposing digital forensics equipment, there are various pertinent factors that will need to be taken into consideration include the cost of the tools used in the analysis, the work needed in the forensics investigations and the available devices on the market. This paper is going to discuss two digital forensic tools used, their advantages, drawbacks and the possible usage of the same.

Description and Function of the Tool

The first tool is the ...

Cybercrime and many other crimes are justified by the collection of appropriate evidence by detectives and other law enforcement agencies. The forensics team to collect evidence from the crime scene uses various techniques and tools. Interviewing the witnesses to gather evidence and being able to incorporate the correct method to investigate the crime scene is expected from professional detectives. The paper highlights four mini cases and knowledge of methods used in these cases to collect evidence by forensics experts. Cyber crimes are crimes done by computer experts through their knowledge of software, programming, and networking techniques. In addition to ...

There are different laws and regulations that guide searching a personal property. One of the permission required searching this workplace is a warrant of search. The American constitution through the 4th Amendment protects private citizens from any manner of search if the searching authority does not have the probable cause for a search (Dutelle, 2016). Therefore to search this property, there is a need to find probable cause to search this facility. As an investigation officer, there is a need to obtain a court order and a police abstract detailing the need for the search and the probable cause ...

The DBIR 2015 is the ninth one from Verizon, and similar to the others, it highlights patterns and trends present in an aggregated incident data set. The report begins by emphasizing that there are few unique breaches in the cyber-world, and that the likelihood that an intrusion mechanism has been applied previously is relatively high. Furtherance, the DBIR informs against the presumption that victims of data breach believe they are in isolation; it is this falsehood that impedes on information sharing on attack patterns, which could collectively help prevent future intrusions. Verizon has managed to develop a classification for ...

Can you (or Mr. Youprop’s Supervisor) search Youprop’s personal vehicle parked in the Company lot for digital evidence?

No. The situation that has been developed after the incidence with Mr. Youprop is a matter that needs to be handled delicately because of the possibility of application of the 4th amendment. Privacy, particularly in areas of work has been an issue that is steadily gaining attention from the justice system. More people are currently concerned with matters of employee searches, be it their personal property or their workspaces. Workers such as Mr., Youprop are usually searched when they are suspected of theft. One of the best ways to handle this issue with minimal law infringement would be, first ...

Question 1

Cyber-vigilantism refers to the vigilantism actions taken by internet users either over the internet or by using applications that be subject to the internet. It comprises vigilantism actions meant to reduce or wipe out cyber-crimes, scams and non-internet related conduct. The main explanation for vigilantism is the lack of central authority to curb all these cyber-crimes and scams thus creating the need for reactions against such behaviors. The lack of central authority to control internet usage has been the reason for the high cases of cyber-crimes, scams that have been a problem to all users of the internet. It is ...

1. What key needs in local law enforcement agencies must be met to improve response to computer crimes? How is the issue of computer crime currently addressed, and how do you feel that law enforcement responses could improve? Explain.

The of the key needs in local law enforcement agencies in improving the response to computer crime is keeping pace with the Tech-savvy criminals. There are has been tremendous changes in the computer field. The computing environment is becoming more and more complex. As such, the computer criminals are also coming up with sophisticated ways of overcoming the security mechanism ...

Question 1

There are number of federal agencies that are established to enforce law and prosecute crimes that are related to computer violation, computer fraud and computer crime. These agencies include Computer Crime and Intellectual Property Section (CCIP), U.S. Department of Justice Criminal Division and Department of Justice’s Computer Crime and Intersexual Property section. These agencies also offer training to ensure that the law enforcement members are able to address the computer and electronic crimes and advanced technology crimes. These agencies conducts complex investigation, on the crime allegation, prevents and prosecutes crimes that are associated with digital technology and computer ...

Question1

There are roles that law enforcement agencies play in the areas of cyber exploitations. One of the roles is that they can collect intelligence information about the perpetrators so that they are able to understand the connections that these perpetrators have. The law enforcement agencies can then break these networks of the perpetrators of cyber crime. They can then prosecute the subjects. Cyber crime is taken to be another crime that can be committed by an individual. The prosecution and the process of undertaking investigations are done by the law enforcement agencies. There are some agencies like the Secret ...

Introduction

When designing a forensic laboratory, there should be efficient planning done. This is because a forensic laboratory should function effectively to avoid interruptions. A forensic laboratory handles sensitive criminal investigations and is the reason why this investigation process should not be interrupted. This calls for the budget committee to have effective planning so that there is a reserve fund for any emergencies. A computer forensics laboratory is a place that can be either permanent or temporary that is used to carry investigations that deal with computer crime. Computer forensic investigations are a collection of techniques, procedures, and processes that are used to collect, store, ...

The BTK serial killer haunted the police for over 15 years with his killing of innocent victims and leaving behind notes for the police. The case remained unsolved until February 2005 when digital forensics facilitated the reconstruction of evidence and hence the tracking down Rader. The notes consisted of poems and puzzles drafted by the serial killer. He even suggested his own name, BTK, standing for his modus operandi: binding, torturing and killing. However, Denis Rader re-established communication with the police in 2004 a via word document stored in a floppy disk. He was unaware of the fact that the disk ...

Summary of the Case Against Mr. Didid

This report is for the evidentiary file of Mr. Isure Didit. The five contraband images previously discovered on Mr. Didit’s laptop were matched by using hash values by the National Center for Missing and Exploited Children (NCMEC) to those of known child pornographic images (previously tied to known underage victims) Because of this discovery, Mr. Didit’s company exercised its right to monitor employee activity at all times and to take company property back into its possession. Thus, we instigated an investigation into the contents of Mr. Didit’s office. In the office, the digital evidence was : ...

Governments across the world have different branches to address different issues or areas. The Federal Bureau of Investigation (FBI) is a major arm of the U.S Department of Justice and a member of the U.S Intelligence Community. Created in 1908 by Charles J. Bonaparte, who was the Attorney General (The FBI: Federal Bureau of Investigation).

The FBI has the power and accountability to scrutinize crimes assigned to it and to provide other law enforcement agencies with cooperative services. Some of the functions of the FBI are to carry out proficient investigations and approved discretion collection to see and counter the threat ...

Introduction

Criminal activities using digital based information call for standard and structured approach of dealing with the victims. Since the vast amount of information is documented in digital form, the evidence required for the prosecution of criminals is also in the same form (Yusoff, Ismail & Hassan, 2011). In computer forensics, various hardware and software tools are used to help in the process of investigation. The data collected from the crime sight require special software for their acquisition and analysis. The proper crime sight reconstruction is attained from the source if it has to be accepted in a court of law (Hassan, ...

Following the American Psychological Association’s Guidelines

Since the conception of the internet, the intentions of users have grown more devious. In the beginning, what appeared to be toy is now often used to commit crimes. When the internet first arrived in homes across America, it was not often used as a tool to hurt others. At most, it was a novelty. However, as time progressed, individuals began to see all the potential held within the internet. A person could go anywhere, do anything, and be anybody. While this must have been exhilarating, it has also proved dangerous. It is difficult to believe at times that some once ...

Criminals, lurking in the shadows of Internet, became more rampant and aggressive in their objectives while behind computers. With the resurgence and increased awareness of crooked wizards and robbery masterminds, computer forensics is quickly becoming a general discipline. Computer forensics is not just composed of police officers, secret security agents, and doctors. They work together with technology experts in efforts to curb crime by using advanced equipment. Computer forensics often involves scientists and lawyers, wherein they assist in accumulating and studying different objects as critical evidences for solving mysteries. Computer forensics is a scientific sub-discipline of digital forensics involving systematic ...

There are many issues and details that one has to put in place when dealing with forensic laboratory. The computer forensics lab is designated place either permanent or mobile for carrying out computer based investigations. It is also a collection of techniques, processes ad procedures that are used in collection, storage, analysis and presentation of digital evidence in relation to cybercrime. Building a forensic laboratory is therefore a complicated task. Some of the key issues that one must look out for is the design of the building because it is not a just like any other ordinary structure. The key issues that should ...

The case involved colluding between the AOL executives and Purchase Pro, Inc. in which they overstated the revenue generated from the software licenses. This made the investors believe that Purchase Pro, Inc. had achieved its sales objectives. To be able to make such revenue claims, the parties had to use computers to overstate the values. Accounting records had to be stored in computers and making such manipulation involved the use of accounting software. Additionally, the cases involved charges of wired fraud, which was done through electronic trading, which means computers were used. One certified professional that could have ...

U.S. versus AOL This was a case regarding fraudulent business operations between PurchasePro and AOL. It focused on the overstating revenues that were obtained from the sale of software licenses. Chief executive officers of PurchasePro were accused of several charges including wire-fraud. This means that the crime involved the use of a computer or an equivalent electronics medium. This attaches the computer system as a means to achievement of the offenders’ main goal. Other crimes related to this case and computer use included identity theft and cyber stalking. As such, this case necessitated the use of computer forensics in the determination ...

When scientific methods are used in the process of preserving, collecting, validation, identification, analysis, interpretation, documentation, and presentation of digital evidence from digital sources, then the process is called digital investigation. The evidence may be used to facilitate the construction of events deemed to be criminal or are in contrast with the laid down procedures. Digital investigations for an organization differ to digital investigation for law enforcement because of the procedure adopted. Different models of operation have been suggested depending on the complexity of the situation. Digital investigations arise as a result of an occurrence suspected, attempted or ...

Computer related Forensic Investigations requires good and careful preparation for an investigation to be successful. Usually, forensic investigations are conducted after a serious threat to information security has been made. Conducting forensic investigations are costly most of time thus careful planning has to be made before starting actual investigations. When planning for a digital forensic investigation, one of the preliminary activities that must be done is to select first the team that will be involved in the investigation. The composition of the team is very important as this will be the “life” of the investigation. A big part of the ...

Computer forensics is one of the new and fastest growing fields in forensic science that involves collecting and examining different forms of electronic evidence carefully. this not only to assesses the extent of damage that may have occurred to a computer resulting from an electronic attack, but also recovers all lost information from this system as well in order to take legal action against a criminal. With the increasing importance of computer security and the gravity of cyber crime, it has become very important for all computer professionals to understand fully the technology used in computer forensics. Computer forensics, therefore, involves ...

SOURCES OF EVIDENCE IN DIGITAL FORENSICS INVESTIGATION

ABSTRACT Today’s society is becoming, increasingly, interconnected through the use of networking technologies and the proliferation of internet. As such, computer intrusions and security incidence are on the increase. Organizations and companies find the use of internet unavoidable in order to advance their operations and efficiency. The ability to handle computer security concerns resulting from seamless connectivity proves to be a major challenge. Other insecurity concerns resulting from insider file alteration and malware installations are equally harmful and should be treated with utmost considerations. As a result, the field of digital forensic investigation has risen to help in unearthing ...

Preserving the Crime Scene

The preservation of a digital crime scene requires that standard recommended procedures be followed. According to Houck, Crsipino, and McAdam, (2012), preserving the crime scene is aimed at reducing chances of tampering the digital evidence. The preservation of the crime scene forms part of the digital investigation process (Wiles and Reyes, 2011). All parties concerned with the crime will be required to be asked questions and the location of the crime scene will need to be identified prior to the preservation. Performing a live analysis will require the computer to be disconnected. This will ensure that data cannot be modified ...

In the year 2008, a young woman Casey Anthony was accused a first-degree murder of her two year old daughter Caylee .She was also charged with other offences which include; aggravated manslaughter, providing false information to the law enforcement and aggravated child abuse. Casey Anthony was accused of providing false information by pleading not guilty of the charges and that the baby was kidnapped by a baby sitter .The case drew a lot of media attention and this forced the judge to keep the location of the jury selection secret for a very long time. The charges against Anthony gained ground due to the ...

Plan for Processing a Potential Crime Scene

Identifying the Potential Digital Evidence Processing a crime scene will involve following standard procedures used in assessing a digital crime scene. According to Wile and Reyes (2011), the process of identifying the potential digital evidence will require a series of investigations to be done. Thus, this will involve assessment of the case, asking the affected parties questions, locating the evidence and documenting the results with the goal of identifying where the crime was exactly committed. In this case, the first clue to potential evidence will be to assess the intrusion detection logs. Additionally, it is important to note that network intrusions ...

Introduction

Crimes digital evidence recovery from the storage media is actually a growing time consuming process since the storage media capacity is in a constant growth state. In addition, it is a complex and difficult task for forensic investigator to examine all the locations in storage media. In modern days, it is actually generally accepted that there is continuing technological evolution including networks, computers, and e-commerce among others, which are ever more involved in aspects of human life. Crimes and illegal activities have in addition increased with the technological evolution. Various organizations are in fact suffering from computer crimes and criminals, which perpetrate ...

Executive summary

The construction of a computer forensic laboratory is a complicated task. There are many requirements that will be needed so that accurate processes are undertaken. This is something that companies take with utmost care in order to have the latest technologies and current trends in the design and configuration. This paper will focus on the requirements that are needed in order to construct a forensic laboratory. The requirements involve such issues as the environmental concerns, security of evidence, management and the process of preservation of evidence. These are the issues and processes that should be protected. There will also be concerns of ...

Introduction

Forensics refers to the use of scientific knowledge for the collection, analysis, and presentation of evidence to the courts (Guo, Jin & Hang, 2011).More specifically, forensic science refers to “the application of scientific techniques and principles to provide evidence to legal or related investigations and determinations” (Guo et al., 2011, p. 225). Although forensic science has been employed in crime investigations since the early twentieth century (Palmer, 2002) through the use of traditional forensic techniques, the emergence of computers and other forms of technology has led to crimes that are being committed either in the cyber world or ...

Data Acquisition and Analysis

Part II. What types of forensic image formats does Adepto support? First Computer forensic software is going to be the stress of the note on Computer Forensic Tools which is Adepto, Adepto is an imaging processor that parts on the Helix Live CD and essential to the drive imaging software GUI (Graphical User Interface) that use for DD and DCFL-DD in commanding the imaging software that essentially use to create a forensically media services and sound imaging and so on. As today it fall into the discussion of Computer Forensic the goes to the board of categories the ...

With the emergent of computers and other electronic in many sections of many people, there is a formidable influence on the juridical system. Digital evidence is information stored on or transmitted by a computer. Digital evidence such as videos, photos, measured values are being accepted in courts. Electronic evidence should be taken care of because it is exceptionally fragile, and it can be modified, damaged or destroyed. There are many cases where digital evidence has not been protected and has impacted on the cases. The failure of such cases results from the fact that vital digital evidence is ignored, destroyed ...

Data hiding within the context of data storage media is indeed something that has been there for a long time. This trend has been there and it started in the military. The various clusters that are found in storage media were the widely used methods that data could be hidden. The file head has been the most common area where files are hidden (Taylor, 2006). The researcher did no mention modern methods of data hiding. There are modern methods that are associated with data hiding in the storage media. These modern methods include cryptography. The researcher only mentioned the methods ...

Question 1

Investigating a digital crime is a delicate one as the evidence should prove to have originated from the said criminal and the evidence should be as original. There are guidelines which have been published that guide in the investigation of digital evidence. One digital investigation evidence principle that has been published is that of taking proper precautions not to damage the digital evidence. This is because of the fact that digital evidence is fragile and should be protected (Casey, 2011). This principle is important and should be taken and protected with care. Digital evidence, if not protected, will be damaged because ...

Introduction

Computer forensics concerns the technical knowledge necessary for collection, analysis and provision of digital evidence in a court of law. Computer forensic refers to the collection, discovery, and preservation of digital data for use in a court of law for the protection of entities or individuals (Bayuk, 2010). This has been in response to the major increase in electronic crimes since the 1970s, especially in the financial sector.

Computer Anti-Forensics

Anti-forensics are the tools, procedures and techniques that undermine forensic tools and the work of forensic investigation. Anti-forensics aims at disrupting the collection of information, avoiding detection, increasing investigation time and reducing the ...

DIGITAL FORENSICS: HOW THIS CONCEPT APPLIES TO DIGITAL CRIME AND DIGITAL TERRORISM

Digital forensics is at times referred to as digital forensic science; this is because the subject is a branch in the field of forensic science. Digital forensics entails the investigation and recovery of digital evidence collected from computer crime. Initially, digital forensics was narrowed to computer data but with time it has evolved to encompass all forms of digital data storage devices. The evolution of digital forensics was uncontrolled between the 1970s and the late 1990s; however, national regulation and policies on the same were introduced in the beginning of the 21st century (Agarwal, Gupta, Saurabh & Chandra, 2011). Digital forensics ...

Introduction

Computer forensic also known as cyber forensic involves the acquisition of legal evidence which is found in computers and digital media storage. It involves using analytical and investigative techniques for the collection and examination of evidence. This technique is commonly used for criminal investigations or civil litigation. (Holley, 2000) There are several computer software which are used for this kind of investigation and analysis of evidence. They include: EnCase, The Sleuth Kit and Autopsy Browser among others. Using a single tool cannot produce substantial evidence to be used for prosecution. There is need to employ at least two of these ...