Premium Essay

What Is System Forensics and Computer Crime

In:

Submitted By friz3033
Words 380
Pages 2
1. What questions should you ask and how should you proceed?
The questions I would ask would be who, what, where, when, why and how about everything that happened during the period in question. Since the questions are fluid to the situation, I can’t pin point anything specific but I never ask the client if she did it or not. Just ask the client what she was doing on the time specified. I would then document what she said happened in chronological order and then proceed to the investigation.

When proceeding with the investigation, the first step is to make a copy of the evidence. You want to have at least two copies of the original evidence (a hash and an image to work with) in case you need a backup for any reason. After that you want to document any findings as accurately and as detailed as possible. Without detailed documentation, courts may not accept the investigative results as vailed or could be torn apart in an examination. While all this is going on, you want to avoid altering the data in any way as this would basically be destroying evidence. You pull the hash by using the command md5sum /dev/hda1 | nc 192.168.0.2 8888 −w 3 as an example. Find the files in question and examine their creation dates, dates accessed and dates last modified. See if those dates match the client’s story and that is about as far as you need to take it. (Easttom, 2014)

2. What is chain of custody and why must it be followed in investigations? The chain of custody is the chronological documentation of finding, preserving, preparing and presenting evidence. Every person that comes in contact with the evidence is documented so as to keep it from being tampered with. If it is tampered with, than you know who did it. Why the documentation is so important is because if there is a hole in the chain of custody, the evidence is considers tainted and cannot be used in a court of law.

Similar Documents

Free Essay

Assignment 1: Computer Forensics Overview

...Assignment 1: Computer Forensics Overview CIS 417 Computer Forensics Computer forensics is the process of investigating and analyzing techniques to gather and preserve information and evidence from a particular computing device in a way it can be presented in a court of law. The main role of computer analyst is to recover data including photos, files/documents, and e-mails from computer storage devices that were deleted, damaged and otherwise manipulated. The forensics expert’s work on cases involving crimes associated with internet based concerns and the investigations of other potential possibilities on other computer systems that may have been related or involved in the crime to find enough evidence of illegal activities. Computer experts can also use their professional knowledge to protect corporate computers/servers from infiltration, determine how the computer was broken into, and recover lost files in the company. Processes are used to obtain this information and some of the processes are as follows; * Investigation process: Computer forensics investigations will typically be done as part of a crime that allegedly occurred. The first step of the investigation should be to verify that a crime took place. Understand what occurred of the incident, assess the case, and see if the crime leads back to the individual. * System Description: Next step, once you verified the crime did occur, you then begin gathering as much information and data about the specific...

Words: 1397 - Pages: 6

Premium Essay

Cyber Crime in India

...Need of Cyber Crime Law In India Abstract A Cyber space is a virtual space that has become as important as real space for business, education and politics. The growing danger from crimes committed against computers, or against information on computers, is beginning to claim attention in the India. The digital age has dramatically changed the scope of a crime by adding the electronic component and it comes a new form of science ≴Computer Forensic Science≵. Computer Forensic allows for the evidence of cyber crime to be admissible in court when prosecuting the cyber criminal. In most countries, existing laws are likely to be unenforceable against such crime. Cyber laws, as it stand today, gives rise to both positive & negative consequences. The main negative consequences is the digital soup so vague that many refer to it as the dark sides of technology and that cyber criminal currently have upper hand. The applicability and effectiveness of our existing laws need to be constantly reviewed to face the risk coming from the cyber world. In this paper we are going to firstly describe the computer forensic, cyber crimes, cyber laws of nation & technology challenges. Aim of this paper is to act as a catalyst to raise awareness regarding computer forensic which continues to grow as one of the most important branch of science and help in investigation of cyber crime which continues to grow as one of the most potent threats to the Internet and computer users of the cyber society of...

Words: 2686 - Pages: 11

Free Essay

Computer Forensics

...Computer Forensics Through the Years Prof. Pepin Galarga Computer Forensics Sep 11, 2010 Table of Content Introduction …………………………………………………………………………………Page 2 The Early Years……………………………………………………………….......................Page 3 Early Training Programs …………………………………………………………………....Page 4 Typical Aspects of Computer Forensic Investigations ……………………………………..Page 5 Legal Aspects of Computer Forensics …………………………………………..……...…..Page 6 Conclusion ………………………………………………………………………………….Page 7 References………………………………………………………………………………..…Page 8 Introduction If you manage or administer information systems and networks, you should understand computer forensics. Forensics is the process of using scientific knowledge for collecting, analyzing, and presenting evidence to the courts. (The word forensics means “to bring to the court.”) Forensics deals primarily with the recovery and analysis of latent evidence. Latent evidence can take many forms, from fingerprints left on a window to DNA evidence recovered from blood stains to the files on a hard drive. Because computer forensics is a new discipline, there is little standardization and consistency across the courts and industry. As a result, it is not yet recognized as a formal “scientific” discipline. Image by Flickr.com, courtesy of Steve Jurvetson Computer forensics is the study of extracting, analyzing and documenting evidence from a computer system or network. It is often used by law enforcement officials to seek...

Words: 1382 - Pages: 6

Free Essay

Computer Forensics

...computer forensics Background of Computer forensics: What is most worth to remember is that computer forensic is only one more from many forensic subdivisions. It’s not new, it’s not revolution.. Computer forensics use the same scientific methods like others forensics subdivisions. So computer forensics is not revolution in forensic science! It’s simple evolution of crime techniques and ideas. Forensic origins: Forensic roots from a Latin word, “forensic” which generally means forum or discussion. In the reign of the Romans, any criminal who has been charged with a crime is presented before an assembly of public folks. Both of the complainant and the defendant are to present their sides through their own speeches. The one who was able to explain his side with fervent delivery and argumentation typically won the case. It is important to realize that computer forensics is only one subdivision of forensic science. It is digital, it includes most advanced computer science but still it is only branch of forensic science, an its main goal is  submission of the proven claims of scientific methods and strategies to recover any significant digital traces. Computer Forensic Timeline: 1970s • First crimes cases involving computers, mainly financial fraud 1980’s • Financial investigators and courts realize that in some cases all the records and evidences were only on computers. • Norton Utilities, “Un-erase” tool created • Association of Certified Fraud...

Words: 4790 - Pages: 20

Premium Essay

Evolution of Crminal Justice Technology

...police are asked to control crime, maintain order, and provide an intricate array of services, from responding to emergency 911 calls to regulating the flow of traffic. On occasion, they must perform remarkable feats of criminal investigation, quell rowdy crowds and violent offenders, and put their lives on the line. Much of the time, police resources are limited. It is estimated that the workload crime imposes on the police has increased fivefold since 1960. Their resources have not kept pace with their workload. To do their job, police frequently have looked to technology for enhancing their effectiveness. The police, with crime laboratories and radio networks, made early use of technology, but most police departments could have been equipped 30 or 40 years ago as well as they are today. The Crime Commission in response to rapidly rising crime rates and urban disorders. The Commission advocated federal government funding for state and local criminal agencies to support their efforts. It called for what soon became the 911 system for fielding emergency calls and recommended that agencies acquire computers to automate their functions. But even with the start-up help of hundreds of millions of dollars in early federal assistance, computerization came slowly. Only in recent years have many agencies found the use of information technology significantly helpful. Examples include fingerprinting databases, computerized crime mapping, and records management systems doing everything from inventorying...

Words: 1398 - Pages: 6

Premium Essay

Cyber Forensics

...International Journal on New Computer Architectures and Their Applications (IJNCAA) 2(1): 127-137 The Society of Digital Information and Wireless Communications, 2012 (ISSN: 2220-9085) Cyber Forensics: Computer Security and Incident Response Virginiah Sekgwathe1, Mohammad Talib2 1 Directorate on Corruption and Economic Crime, Gaborone, BOTSWANA veesek@gmail.com 2 Department of Computer Science, University of Botswana, BOTSWANA talib@mopipi.ub.bw ABSTRACT The intensification of Information and Communications Technology usage in all facets of life exceedingly amplify the incidents of information security policy breaches, cyber crimes, fraud, commercial crimes, cyber laundering etc, hence require a well developed approach to tackle these incidents in order to realize legally defensible digital evidence. Since electronic evidence is fragile and can easily be modified, finding this data, collecting, preserving, and presenting it properly in a court of law is the real challenge. There is a need for use of semantic analysis to discover underlying security policy requirements and internal power structures and institutionalization of anti cyber attack, antimoney-laundering and regulatory schemes. The first responders to cyber security incidents often than always are an organization ICT personnel who are technically sound though may be deficient in investigative skill. The scientific standards of cyber forensics dictates the procedure as it promotes...

Words: 5129 - Pages: 21

Premium Essay

Essay On Computer Forensics

...Abstract: Rising era of computer and other technologies as internet and gadgets, explosively increase in number of cybercrime or other crimes using technologies. The growth of computer forensic has taken as huge success to control those crimes which are committed using computers. The main task of computer forensic is to examining and collecting electronic data as evidence from a crime scene. The work of computer forensic is to recover the data which has been hacked or lost by the criminals using different system. The growing dependency on computer forensic has decreased the cybercrime and professionals have to understand the computer technology that is used in computer forensic. Introduction Forensic roots from a Latin word, “forensic” which...

Words: 870 - Pages: 4

Free Essay

Computer Intrusion Forensics

...Computer Intrusion Forensics Research Paper Nathan Balon Ronald Stovall Thomas Scaria CIS 544 Abstract The need for computer intrusion forensics arises from the alarming increase in the number of computer crimes that are committed annually. After a computer system has been breached and an intrusion has been detected, there is a need for a computer forensics investigation to follow. Computer forensics is used to bring to justice, those responsible for conducting attacks on computer systems throughout the world. Because of this the law must be follow precisely when conducting a forensics investigation. It is not enough to simple know an attacker is responsible for the crime, the forensics investigation must be carried out in a precise manner that will produce evidence that is amicable in a court room. For computer intrusion forensics many methodologies have been designed to be used when conducting an investigation. A computer forensics investigator also needs certain skills to conduct the investigation. Along with this, the computer forensics investigator must be equipped with an array of software tools. With the birth of the Internet and networks, the computer intrusion has never been as significant as it is now. There are different preventive measures available, such as access control and authentication, to attempt to prevent intruders. Intrusion detection systems (IDS) are developed to detect an intrusion as it occurs, and to execute countermeasures when detected...

Words: 9608 - Pages: 39

Premium Essay

Welcome to Homicide

...Welcome to Homicide Forensic Science is a fundamental component of the justice system. Forensic scientists use scientific techniques and knowledge to assist law enforcement in investigations and solving crimes. They collect and analyze numerous types of evidence, including blood, body fluids; DNA; and human tissue. Forensic scientists assist the decision makers by showing the prosecutor if the issue has merit before it reaches the courtroom thereby reducing the number of cases having to be heard. Their decisions are based on scientific investigations and not circumstantial evidence or unreliable witnesses. Forensic scientists can restore faith in the judicial system with the use of science and technology for facts in criminal and civil investigations. The legal system is established on the belief that the legal process results in justice for all. History of forensic science The history of Forensic science or the applying of scientific principles to legal questions has a lengthy and interesting history. The first recorded autopsy was reported in 44 B.C was on Julius Caesar, where the Roman physician, Antistius proclaimed that he had 23 wounds on his body but only one was fatal. In 1248, a Chinese book entitled “His Duan Yu” (meaning The Washing Away of Wrongs) explaining how to tell apart a drowning from a strangulation. This was also the first recorded use of medicine to assist in solving crimes. In 1590, the first microscope was developed. In 1775, Karl...

Words: 2382 - Pages: 10

Premium Essay

Term Paper

...Computer Forensic Investigator’s Role in Cases Abstract Today, more and more people are using their computers for everything, from communication, to online banking and investing, to shopping.  As we do these things on a more regular basis, we open ourselves up to potential hackers and attackers.  While some may be looking to phish your personal or proprietary information and identity for resale, others simply just want to use your computer as a platform from which to attack other unknowing targets. The people responsible for computer security and digital forensic examination need to continually update their skills, tools and knowledge to stay abreast with fast growing technology of today. In this day and time you can no longer just unplug a computer and leave it to be evaluated later at the lab. Information that is on computers is so critical to the investigation of a case. Systems today can easily lose data just by unplugging and turning it off, making it hard to recover any evidence needed. Without policies and procedures, investigators, one wouldn’t know this, two would potentially destroy and corrupt any evidence admissible in court and the whole unit would be lost and a total failure. That is why it is important that management establish guidelines and procedures. Although with technology continuing to change, constant revisions will be made to these documents, but ensuring they stay updated is most crucial of all. Computer Forensic examiners and investigators have...

Words: 1408 - Pages: 6

Premium Essay

Nt1310 Unit 1

...1. What is hardware and software? Give an example of each. Ans. Hardware refers to the physical components of a computer or other devices like the hard disk drive, random access memory (RAM), and the central processing unit (CPU). An example of hardware is a printer. Software is the set of instructions that allows a particular program to complete a task. An example of software is Windows which is an operating system. 2. What is RAM? Ans. RAM stands for Random Access Memory. It is the non-permanent or volatile memory of a computer. RAM is used in computers to speed up the process of its software and other processes. When the computer is shut down, the information of RAM that was used while operating programs in the computer before, will be...

Words: 627 - Pages: 3

Premium Essay

Forensic Evidence in It

...U.S. Department of Justice Office of Justice Programs National Institute of Justice APR. 04 Special REPORT Forensic Examination of Digital Evidence: A Guide for Law Enforcement U.S. Department of Justice Office of Justice Programs 810 Seventh Street N.W. Washington, DC 20531 John Ashcroft Attorney General Deborah J. Daniels Assistant Attorney General Sarah V. Hart Director, National Institute of Justice This and other publications and products of the U.S. Department of Justice, Office of Justice Programs, National Institute of Justice can be found on the World Wide Web at the following site: Office of Justice Programs National Institute of Justice http://www.ojp.usdoj.gov/nij APR. 04 Forensic Examination of Digital Evidence: A Guide for Law Enforcement NCJ 199408 Sarah V. Hart Director This document is not intended to create, does not create, and may not be relied upon to create any rights, substantive or procedural, enforceable at law by any party in any matter civil or criminal. Opinions or points of view expressed in this document represent a consensus of the authors and do not represent the official position or policies of the U.S. Department of Justice. The products, manufacturers, and organizations discussed in this document are presented for informational purposes only and do not constitute product approval or endorsement by the U.S. Department of Justice. This document was prepared under Interagency Agreement #1999–IJ–R–094 between...

Words: 22743 - Pages: 91

Free Essay

Computer Forensics

...Computer Forensics The world of crime has expanded right along with the explosion of the internet. The modern cyber criminal has veritable global playground in which to steal money and information from unsuspecting victims. Computer forensics is a quickly emerging science against the increasingly difficult battle to bring criminals to justice who perpetrates crimes on others. The computer forensics field is a relatively new investigative tool but enjoys continual advances in procedures, standards, and methodology which is making the identification, preservation, and analyzing of digital evidence a powerful law enforcement apparatus. The job of the cyber forensic professional is to look for clues the attacker left behind on web sites, servers, and even the e-mail message itself that will unravel their sometimes carefully woven veil of secrecy. Attackers come in all forms and from a variety of different circumstances. For instance, an attacker can begin a phishing scam with only a web server they control with very little programming experience and a way to send a lot of e-mail messages. (Jones 4) In order to combat the waves of cyber-attackers, we must utilize Open Source Community applications to combat the continual onslaught of infections, exploitations, and trickery employed everyday against our systems and networks. Today's attacker uses a variety of technologies to employ their methods and understanding those abilities is integral to preparing for an investigation...

Words: 2742 - Pages: 11

Premium Essay

Fort Worth Police Department

...person with the computer crime detectives. The Fort Worth Police Department consists of several different divisions and units such as beat patrol, narcotics, SWAT (Specialized Weapons And Tactics team) and a VICE team which generally works with a combination of offenses...

Words: 2338 - Pages: 10

Premium Essay

Research Topic of Interest

...------------------------------------------------- ------------------------------------------------- ------------------------------------------------- ------------------------------------------------- Dr. Randy Brown Annotated Biographies Oreku, G. S., & Li, J. (2009). End user authentication (EUA) model and password for security. Journal of Organizational and End User Computing, 21(2), 28-43. Retrieved from http://search.proquest.com.proxy1.ncu.edu/docview/199920202?accountid=28180 This article proposes an End User Authentication flexibility model to form a set of services that will constitute a flexible authentication model for a modern computing systems or infrastructure. This method would provide multiple authentications that will enable suppliers access a particular network system with varying levels of guarantee. It describes a simple three level ticket system used by clients and servers to achieve prevention of...

Words: 2303 - Pages: 10