Computer Forensics s4

These flashcards cover key concepts and terms related to computer forensics, including crime scene analysis, data storage, evidence handling, internet activity, and mobile forensics.

Types of computers involved in crime casework

Desktops, laptops, servers, mobile devices, tablets, embedded systems, and cloud-based platforms.

First step in analyzing a computer crime scene

Securing the scene and preserving digital evidence to prevent tampering or data loss.

Types of computer crime

Hacking, identity theft, cyberstalking, phishing, malware distribution, data breaches, and intellectual property theft.

Hardware components of a computer

CPU, RAM, hard drive, motherboard, input/output devices.

Software components of a computer

Operating system, applications, drivers, and utilities.

Data storage in a hard disk drive

Data is stored magnetically in sectors and tracks; file systems like NTFS or FAT32 are used to locate and retrieve files.

Proper procedure for preserving computer evidence

Document the scene, photograph devices, disconnect power (if volatile data isn’t needed), use write-blockers for imaging, and maintain chain of custody.

Visible data

Files accessible through normal means.

Latent data

Deleted files, metadata, hidden partitions, and slack space recovered through forensic tools.

User's Internet activities investigation areas

Browser history, cache, cookies, bookmarks, downloads folder, email clients, chat logs, and system logs.

Role of IP in forensic investigations

IP addresses help trace the origin and destination of online activity, identify devices, and correlate logs across systems.

Techniques for investigating unauthorized computer intrusion

Log analysis, malware scanning, network traffic monitoring, file integrity checks, and timeline reconstruction.

Services offered by modern mobile services

Messaging, GPS, cloud sync, social media, banking, and health tracking.

Investigative value of mobile services

Location history, communications, app usage, and synced data across devices.