Computer Forensics

Computer Forensics
First sensation must start every investigation with a plan for the computer forensics investigation at hand; however, at the same time stay feasible enough/flexible as the evidence could change. For the case at hand, I would have to say that by using FTKs forensic analysis feature/function, would everyow one to bet for such(prenominal) embedded messages. In appendage to the use of FTKs forensic analysis, one should also consider the tools avail up to(p) for telecommunicate investigation. By feel for, and capturing, time stamps one could determine when the files were transmitted. In addition, with the capture of the IP address (or addresses), one could prove/confirm who sent the email (or at the least the location it came from). As for fronting the lifelike files with FTK, one could either perform and indexed search or a harp search.
An indexed search will put together all of the words on the evidence drive so that FTK will be able to located them quickly; this search provides quite a fast results from the search. However, there are always going to be down sides; for example, indexing may not be able to catalog each and every word based on the way the data is stored on the suspects drive(s).



Indexing can labor many hours to complete; in fact it is suggested to run the search overnight; not too convenient or high-octane in most situations. Also, with indexed searches, you are not able to search hexadecimal string values. There are always pros and cons, because one must consider all available tools/programs in order to properly recover/copy/capture the involve evidence.
When using a live search, one can vex things like text that has been hidden in places that indexed searches may not find, such as unallocated spaces. Another great point with live searches would be the ability to search for clear, specific items. In addition to those options, a live search provides you with the ability to search for two hexadecimal and alphanumeric values, unlike with an indexed search....If you want to get a full essay, order it on our website: Orderessay



If you want to get a full essay, wisit our page: write my essay .