Question

As a digital investigator for your local sheriff’s department, you have been asked to go with a detective to a local school that got a bomb threat in an anonymous e-mail. The detective already has information from a subpoena sent to the last known ISP where the anonymous e-mail originated, and the message was sent from a residence in the school’s neighborhood. The detective tells you the school principal also stated that the school’s Web server had been defaced by an unknown attacker. The detective has just obtained a warrant for the search and seizure of a computer at the residence the ISP identified. Prepare a list of what items should be included in an initial-response field kit to ensure the preservation of digital evidence when the warrant is carried out

Answer 1

Laptop,Forensics boot disk,Digital camera, flash,disk drive like IDE.,Dual write protect external drive box,Cables like FireWire and USB cables,Cable tags,Indelible markers,labels etc

Explanation: Preservation of digital or computer evidence is one of the key factors to consider in a criminal investigation. Evidence is a major factor in the criminal justice system in most countries of the world.

Laptops,Camera,Flash, Indelible markers, forensic boot disc,disk drive etc are some of the items required to ensure the preservation of digital evidence.

Laptop will help to view and evaluate the emails received and retrieve data,camera will help to take pictures of the crime scene,flash will help to retrieve data from both the computer and the camera etc