Ch 12 - TF Only

The term "firmware" indicates that software is stored on a separate storage unit, as opposed to directly in the hardware

When outsourcing ops to a cloud service provider, the client is responsible for determining the best fault tolerance

A primary concern for collected evidence is preservation of its collected state, which means that it remains unchanged

Time stamps correspond to computer log files to help coordinate a events and are accurate to at least the second.

2 ways to protect evidence during imaging are to use software that forces read-only mode or blocks any write operations

Forensic labs may use both open source and commercial software for digital analysis.

A Faraday bag stops any electromagnetic emanations from passing into or out of the bag, preventing communication.

The process of collecting evidence is called evidence preservation.

Testimonial evidence is often the most important evidence in court because it provides relevance for other types.

The term "computer crime" refers to crimes that target computer resources, either data computers store and/or services

An example of a nonaccess computer crime is crashing a target's critical functionality to prevent normal processes

Today's mobile devices almost all run with either iOS or Android.

E-discovery is an iterative process of examining storage, searching for items, identifying items that may have value

he U.S. Department of Defense (DoD) Cyber Crime Center (DC3) sets standards for digital evidence processing, etc.

Digital forensics is the process of using well-defined analytical and investigative techniques to guide evidence tasks

Even if a mobile device is deemed not to be a direct part of a incident, its ability to record could be material