CHS 3501 Computers and the future0

CHS 3501 Computers and the future0 - COMPUTER FORENSICS The...

Info iconThis preview shows pages 1–5. Sign up to view the full content.

View Full Document Right Arrow Icon
1 1 • The role of electronic data in investigative work has increased considerably in recent years. • Computer forensics involves the preservation, acquisition, extraction, and interpretation of computer data. • In today’s world of technology, many devices are capable of storing data and could thus be grouped into the field of computer forensics. COMPUTER FORENSICS 2 Terminology • Computer Case/Chassis: This is the physical box holding the fixed internal computer components in place. • Power Supply: PC’s power supply converts the power it gets from the wall outlet to a useable format for the computer and its components. • Motherboard: The main circuit board contained within a computer (or other electronic devices) is referred to as the motherboard. • System Bus: Contained on the motherboard, the system bus is a vast complex network of wires that serves to carry data from one hardware device to another.
Background image of page 1

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
2 3 Terminology • Read Only Memory (ROM): ROM chips store programs called firmware, used to start the boot process and configure a computer’s components. • Random Access Memory (RAM): RAM serves to take the burden off of the computer’s processor and Hard Disk Drive (HDD). – The computer, aware that it may need certain data at a moments notice, stores the data in RAM. – RAM is referred to as volatile memory because it is not permanent; its contents undergo constant change and are forever lost once power is taken away from the computer. 4 Terminology • Central Processing Unit (CPU): The CPU, also referred to as a processor, is essentially the brains of the computer. • Input Devices: These devices are used to get data into the computer – To name a few: • Keyboard • Mouse • Joy stick • Scanner
Background image of page 2
3 5 Terminology • Output Devices: Equipment through which data is obtained from the computer. – To name a few: • Monitor • Printer • Speakers • The Hard Disk Drive (HDD) is typically the primary location of data storage within the computer. 6 Terminology • Different operating systems map out (partition) HDDs in different manners • Examiners must be familiar with the file system they are examining. • Evidence exists in many different locations and in numerous forms on a HDD. • The type of evidence can be grouped under two major sub-headings: visible and latent data.
Background image of page 3

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
4 7 How Data is Stored Sectors are typically 512 bytes in size. – Remember a byte is 8 bits (also called a character). – A bit is a single 1 or 0. A "megabyte" is one million bytes or eight million bits a "gigabyte" is one billion bytes or eight billion bits, a “terabyte" is one trillion bytes or eight trillion bits Clusters are groups of sectors and their size is defined by the operating system. – Clusters are always in sector multiples of two.
Background image of page 4
Image of page 5
This is the end of the preview. Sign up to access the rest of the document.

{[ snackBarMessage ]}

Page1 / 28

CHS 3501 Computers and the future0 - COMPUTER FORENSICS The...

This preview shows document pages 1 - 5. Sign up to view the full document.

View Full Document Right Arrow Icon
Ask a homework question - tutors are online