Reference no: EM133238952
Case: You are assigned as a Digital Forensics Examiner with the Middle Georgia Cybercrime Task Force and you have been contacted by an Assistant United States Attorney (AUSA) to testify as an expert witness on aspect of data storage. The case in question deals with an individual who is believed to have been hiding data in what the AUSA refers to as "slack space," but based on his abstract use of jargon such as "volume slack," "RAM Slack," "File Slack," and "File System Slack" it is obvious he does not understand the terminology of Digital Forensics. In order to prepare for trial, you schedule a meeting with the AUSA in order to educate him on these topics.
Your assignment, is to research and define the following terminology:
1. File Slack
2. RAM Slack
3. Volume Slack
4. File System Slack
Then you need to answer the following case specific questions:
Question 1. The suspect in this case is using a Windows 10 Operating System, what types of slack space (the terminology listed above) could be used in this Operating System to conceal data?
Question 2. If you find data within the Windows 10 partition, which is not addressed by the Operating System, how could it have gotten there?
Question 3. Will the unaddressed data persist? If not, what will cause the data to be erased on a standard Hard Drive? What about on a Solid State Drive?
What command would you use to save the contents
: CIS221 California Institute of the Arts What command would you use to save the contents of the BCD store to a file? (Scroll up on the screen to see the whole
|
Create a truth table from a circuit
: Explain step by step how to create a truth table from a circuit with 4 values A,b,c,d and y as the output?
|
How to installing hyper v and managing any number of vm
: IT 278 Purdue Global University, how to installing Hyper v and managing any number of VMs, include any monitoring needed, as well as installation of updates
|
Design a python class to get the items
: IE 7280 Northeastern University- Generate a standard normal distribution for three different sample sizes 100, 5000, 50,000. Design a python class to get the
|
What will cause the data to be erased on a standard drive
: ITEC 4321 Middle Georgia State University, Will the unaddressed data persist? If not, what will cause the data to be erased on a standard Hard Drive
|
Is it fair not to let employers choose employees
: Is it fair not to let employers choose employees with a track record of holding a job? What hiring policy best achieves fairness
|
Write an annotated bibliography on protective equipment
: Protective Equipment Annotated Bibliography - Research an article and write an annotated bibliography on protective equipment
|
Difference between the histograms
: CC 80316 Harvard University, Identify one difference between the histograms, in terms of the statistical properties. Can you comment on the average and/or
|
Discuss the barriers to effective communication
: Discuss the barriers to effective communication. How could the problem have been prevented? In your answer, discuss the requirement for active listening
|