Computer Forensics Ch.2
About this set
Created by:
berevan on January 21, 2012
Subjects:
Computer Forensics and Investigation
Description:
Guide to Computer Forensics and Investigations, Fourth Edition Course Technology Cengage Learning
Log in to favorite or report as inappropriate.
Order by
16 terms
Terms | Definitions |
|---|---|
 approved secure container | A fireproof container locked by a key or combination. |
| attorney-client privilege (ACP) | Communication between an attorney and client about legal matters is protected as confidential communications. The purpose of having confidential communications is to promote honest and open dialogue between an attorney and client. This confidential information must not be shared with unauthorized people. |
| bit-stream copy | A bit-by-bit duplicate of data on the original storage medium. This process is usually called "acquiring an image" or "making an image." |
| bit-stream image | The file where the bit-stream copy is stored; usually referred to as an "image," "image save," or "image file." |
| chain of custody | The route evidence takes from the time the investigator obtains it until the case is closed or goes to court. |
| evidence bags | Nonstatic bags used to transport removable media, hard drives, and other computer components. |
| evidence custody form | A printed form indicating who has signed out and been in physical possession of evidence. |
| forensic copy | Another name for a bit-stream image. |
| forensic workstation | A workstation set up to allow copying forensic evidence, whether on a hard drive, USB drive, CD, or Zip disk. It usually has software preloaded and ready to use. |
| interrogation | The process of trying to get a suspect to confess to a specific incident or crime. |
| interview | A conversation conducted to collect information from a witness or suspect about specific facts related to an investigation. |
| multi-evidence | form An evidence custody form used to list all items associated with a case. See also evidence custody form. |
| password-cracking software | Software used to match the hash patterns of passwords or to simply guess passwords by using common combinations or standard algorithms. |
| password protected | The method of requiring a password to limit access to certain files and areas of storage media; this method prevents unintentional or unauthorized use. |
| repeatable findings | Being able to obtain the same results every time from a computer forensics examination. |
| single-evidence form | A form that dedicates a page for each item retrieved for a case. It allows investigators to add more detail about exactly what was done to the evidence each time it was taken from the storage locker. See also evidence custody form. |
First Time Here?
Welcome to Quizlet, a fun, free place to study. Try these flashcards, find others to study, or make your own.