Disc 3- Word Document - Copy - Copy

Disc 3- Word Document - Copy - Copy - ◦ Describe some of...

Info iconThis preview shows page 1. Sign up to view the full content.

View Full Document Right Arrow Icon
Assignment Type:  Discussion Board  Deliverable Length:  3-5 pages Real-Time Forensic Analysis You are providing training to your forensics team on the benefits and specifics of real-time covert  computer forensics monitoring with a comparison to the stand-alone overt imaging of a hard drive. A  computer forensics examination of any formatted or storage media can be conducted in real-time  without the need to complete the full bit-stream image of the hard drive. You should integrate yourself into the discussion through observing the responses of  others and helping to build their content through quality comments. Discussion Board Assignment Guidelines: In 3–5 paragraphs, address the following: What are the specifics of what you will provide the team in this training?
Background image of page 1
This is the end of the preview. Sign up to access the rest of the document.

Unformatted text preview: ◦ Describe some of the similarities and differences between performing real-time forensics with Encase Enterprise and a bit-image copy of a stand-alone system with your team in the training. ◦ When is it more productive for the case to use real-time covert forensics acquisition than overt imaging of a suspect drive? • Post a new topic to the Discussion Board that contains your responses pertaining to the above information. • Comment on at least two other students' posts and discuss their answers in a way that encourages further discussion. ◦ What did you find factual about their response? ◦ How could you expand on their response or comments when interacting with others? A reference of WEB site Link only & or Book info....
View Full Document

This note was uploaded on 04/01/2012 for the course ECON hui taught by Professor Uiuhuh during the Spring '12 term at York University.

Ask a homework question - tutors are online