Reference no: EM133690739
Problem
Demonstrative evidence is information that helps explain other evidence. An example is a picture that explains a technical concept to the judge and jury by using an analogy. The forensic specialist must be able to translate technology into understandable descriptions. Pictures often communicate better than just numbers and words, so a forensic specialist will often create charts, graphs, and diagrams.
Your assignment is as follows:
Choose one of the following technical concepts and prepare the demonstrative evidence (one PowerPoint slide) to explain it to the judge and jury. Remember to use an ANALOGY. If you don't know the meaning of the word "ANALOGY," look it up! If you simply create a page with the technical definition, you are missing the point and will not receive credit for the assignment. As an example....metadata may be compared to the information on the outside of an envelope (data about the data inside the envelope). You can't use this example as your answer.
Concept I: Explain "What is metadata?" and how is it used to identify who authored a file or when a file was revised or updated.
Concept II: Explain "What is slack space?" and how is it used to identify hidden or previously deleted evidence.
Concept III: Explain "What is the Windows Registry?" and how is it used to identify software previously installed on the suspect drive.
Concept IV: Explains "What is a file header?" and how is it used to identify the true file structure regardless of the file extension assigned to the file?