StudyHub

• Digital forensic lab setup

You are given a task to set up a digital forensic lab for your department. Explain in detail the considerations on:

1. Equipment
2. Security
3. Environment
4. Malicious programs
5. Ongoing costs on hardware and software

• Software write-blocker

1. Explain in detail the steps of how you validate a software write blocker tool,
2. On whether this tool is validated as a write blocking tool used in the context of digital forensic examination.

• Forensic imaging

1. Explain what is a forensic image in the context of digital forensics.
2. What are the differences between a forensic copy (forensic clone) and a forensic image?

• Slack space

1. Explain what is slack space (general) in the context of digital forensics.
2. Where can slack space (general) be found in a forensic image of a physical hard disk?
3. What is the use of slack space in the context of digital forensic investigation?

• Media sterilization

1. What is media sterilization in the context of digital forensics?
2. Explain in detail, with aid of screenshots, the steps to sterilize a media.
3. How to confirm that it has been sterilized?
4. Why and when should media sterilization be done?