answer.
Ask question
Login Signup
Ask question
All categories
  • English
  • Mathematics
  • Social Studies
  • Business
  • History
  • Health
  • Geography
  • Biology
  • Physics
  • Chemistry
  • Computers and Technology
  • Arts
  • World Languages
  • Spanish
  • French
  • German
  • Advanced Placement (AP)
  • SAT
  • Medicine
  • Law
  • Engineering
lara
2 months ago
9

As part of the duties of a digital forensics examiner, creating an investigation plan is a standard practice. Write a 3 to 4 (no

t including title or reference page) page paper that describes how you would organize an investigation for a potential fraud case. In addition, list methods you plan to use to validate the data collected from drives and files such as Word and Excel, with hashes. Specify the hash algorithm you plan to use, such as MD5 or SHA1. Make sure you follow the grading rubric and write your paper in APA format.
Computers and Technology
1 answer:
Harlamova29_29 [1K]2 months ago
7 0
A digital forensic investigation is a specific type of digital inquiry where methodologies and techniques are employed to enable results that can be presented in legal frameworks. This investigation might begin to ascertain if counterfeit digital images are present on a computer. For instance, Global Finance Company, which has a broad range of financial products and clients globally, finds itself in a situation where a breach has been reported involving the manager's computer. In response, a team is dispatched to the branch for the digital forensic investigation. Concerns highlighted by the company include: 1. Timely updates of application and network infrastructure. 2. A report from a branch manager in Brisbane expressing concerns of possible breaches. 3. All office servers and workstations primarily utilize Microsoft Windows. 4. Full implementation of firewalls and network segregation. 5. Although there is intrusion detection and logging across branches, their application has been neglected. The digital forensic investigation follows a structured approach comprising four phases: Collection, Examination, Analysis, and Reporting. The investigation model used proves to be effective for assessing the security incident at the regional branch. 1. In the Collection phase, data from the manager's workstation and all relevant servers must be gathered systematically. This includes identifying both internal and external storage contexts and ensuring availability of necessary forensic tools. The imaging of target computers is also crucial, along with hashing to maintain data integrity, while capturing network traffic. 2. The Examination phase involves a comprehensive analysis, comparing original data against logical copies to derive insights concerning system registry evaluations and other critical data points. Tools used for this include specific commands to assess file retrieval. 3. In the Analysis phase, various methodologies are employed, including keyword searches, file recovery, and registry data extraction, utilizing tools like FTK and ILOOKIX to access essential documents. 4. Finally, the Reporting phase concludes the investigation with the audit team generating a comprehensive report detailing the incident's summary, analyzing data, and concluding findings, while also supporting documentation with both volatile and non-volatile evidence.
You might be interested in
Recall that with the CSMA/CD protocol, the adapter waits K. 512 bit times after a collision, where K is drawn randomly. a. For f
Amiraneli [1052]

Complete Question:

Remember that in the CSMA/CD protocol, after a collision, the adapter pauses for K. 512 bit times, where K is randomly chosen. a. For the first collision, if K=100, what is the waiting duration before sensing the channel again for a 1 Mbps broadcast channel? And for a 10 Mbps broadcast channel?

Answer:

a) 51.2 msec.  b) 5.12 msec

Explanation:

With K set at 100, the duration the adapter must wait after detecting a collision is calculated using the following formula:

  • Tw = K*512*bit time

The bit time is determined by the inverse of the channel's bandwidth, expressed in bits per second. Therefore, for the instances mentioned in the question, we get:

a) BW = 1 Mbps = 10⁶ bps

⇒ Tw = 100*512*(1/10⁶) bps = 51.2*10⁻³ sec. = 51.2 msec

b) BW = 10 Mbps = 10⁷ bps

⇒ Tw = 100*512*(1/10⁷) bps = 5.12*10⁻³ sec. = 5.12 msec

5 0
2 months ago
In this code, identify the repeated pattern and replace it with a function called month_days, that receives the name of the mont
8_murik_8 [964]

Answer:

Below is the month_days function:

def month_days(month, days):

 print (month +" has " + str(days) + " days.")

You can invoke this function with arguments like:

month_days ("June", 30)

month_days("July", 31)

The function can also be restructured as follows:

def month_days(month, days):

 return (month +" has " + str(days) + " days.")

To view the output, call the function along with print like this:

print(month_days ("June", 30))

print(month_days("July", 31))

Explanation:

The defined month_days function takes two parameters: the month name and the number of days in that month. It has a return statement return (month +" has " + str(days) + " days.") which combines the month name held in the variable month with the word "has" and then the number of days stored in days followed by the term days.

For instance, if "June" is passed in as month and 30 as days, the output will be:

June has 30 days.

This program can also be constructed using an f-string for better formatting in the month_days function:

def month_days(month, days):

   output = f"{month} has {days} days."

   return (output)

To see the output, invoke the function with print:

print (month_days("June", 30))

print (month_days("July", 31))

The f-string starts with 'f' and includes the parameters month and days within curly braces. The variables month and days are substituted with their respective values when the function is called.

Screenshot of the program and its output is attached.

6 0
3 months ago
The president of the company wants a list of all orders ever taken. He wants to see the customer name, the last name of the empl
zubka84 [1067]

Response:

refer to the explanation

Clarification:

Examine the SQL statement shown below:

SELECT c.CustomerName, e.LastName, s.ShipperName, p.ProductName, o.Quantity, od.OrderDate

FROM

Customers c, Employees e, Shippers s, Orders o, OrderDetails od, Products p

WHERE c.customerID = o.customerID AND

e.employeeID = o.employeeID AND

o.orderID = od.orderID AND

od.shipperID = s.shipperID AND

od.productID = p.productID;

6 0
2 months ago
According to the author, there are five hedging strategies organizations can pursue. One of them is: Select one: a. commit with
zubka84 [1067]

Answer:

The correct choice is option "A": commit with fallback.

Explanation:

The American scholar Alfred A. Marcus (born 1950) discusses in his book "The Future of Technology Management and the Business" (2015) that hedging can serve as a strategy to protect businesses from the rapidly changing landscape brought on by ongoing technological advancements in the market. As per Marcus, firms should adopt five hedging strategies:

  1. Bet on the most likely: focus on the product with the greatest success potential.
  2. Follow a robust approach: invest across numerous products.
  3. Postpone until more clarity is gained: wait for the appropriate moment to respond to market shifts.
  4. Commit with a fallback: adjust according to market conditions.
  5. Strive to shape the future: innovate.
7 0
2 months ago
Discussion Question 10: A bank in California has 13 branches spread throughout northern California , each with its own minicompu
Harlamova29_29 [1022]
The banking system that poses greater risk of vulnerabilities is the one with ten branches dispersed across California, where data resides on a central mainframe located in San Francisco. If the branches do not share data across the network, the risk of hacking is reduced. However, with a network setup, both data sharing and centralized storage increase exposure to unauthorized access.
3 0
2 months ago
Other questions:
  • A technician with a PC is using multiple applications while connected to the Internet. How is the PC able to keep track of the d
    8·2 answers
  • Modern operating systems decouple a process address space from the machine’s physical memory. List two advantages of this design
    15·1 answer
  • U.S. industries like steel, computers, and energy need to be protected from foreign competition to ensure which of the following
    6·2 answers
  • What are the set of rules to move data from one computer to another?
    11·1 answer
  • An array subscript can be an expression, but only as long as the expression evaluates to what type?
    7·1 answer
  • A wireless network does not benefit like a wired network does, when it comes to collision reduction. Which device reduces collis
    6·1 answer
  • Redo Programming Exercise 16 of Chapter 4 so that all the named constants are defined in a namespace royaltyRates. PLEASE DONT F
    14·1 answer
  • Stan’s assignment is to print a three-dimensional image on a piece of paper. Which printing technique should he use?
    14·2 answers
  • In today’s fast-paced, often "agile" software development, how can the secure design be implemented?
    11·1 answer
  • _ is a model of computing in which computer processing, storage, software, and other services are provided as a shared pool of v
    10·1 answer
Add answer
Login
Not registered? Fast signup
Signup
Login Signup
Ask question!