Be certain to cite your sources using APA style, however, no credit will be provided for uncited sources, or sources that do not resolve to reflect the correct answer. 

1. As a forensic investigator, provide two examples, one of a corporate investigation and one of a civil investigation, in which you would be asked to provide evidence.  Where would the evidence supporting each of the cases in your example be likely to reside?

 

2. What are the “Federal Rules of Evidence”? Where did they originate?  What impact on log file admissibility might they have?

 

1. 3. Write blockers are used to protect against inadvertently tainting evidence. Provide a discussion of the different ways that these can be implemented and an example of a specific vendor technology.

 

1. 4.  What information of importance to an investigation can be recovered from performing a bit-by-bit forensic duplication of a hard drive that cannot be recovered by performing a standard copy of one drive to another?  Discuss the three most popular formats for bit-stream images of digital media.