Question

1.) You are a digital forensic examiner and have been asked to examine a hard drive for potential evidence. Give examples of how the hard drive (or the data on it) could be used as (or lead to the presentation of) all four types of evidence in court; testimonial, real, documentary, and demonstrative. If you do not believe one or more of the types of evidence would be included, explain why not.

Answer 1

Answer & Explanation:

The hard drive could contain some type of reports which might prove to be the evidence of some bad guys involved. Some real evidence such as images or documents related to the crime committed such as corruption-related property papers details of bank accounts along with a possibility that it may also contain a video recording which may prove as evidence. so there shouldn't be any demonstrative proof which can present there by having a hard drive and can be used as evidence in the court.