chapter 19 computer forensics

What is the format for inputting 'Trusted IPs' in the user settings?

###.###.###.### 0-255

software

A program or instructions that give directions to the computer.

What does CPU stand for?

Central Processing Unit

last process of the latent data

Finally, when a user deletes files the data remains behind.

what does hdd stand for

Hard Disk Drive

ip addresses

Provide the means by which data can be routed to the appropriate location, and they provide the means by which most internet investigations are conducted

hardware

The physical components of a computer.

visible data

all data that the operating system is presently aware of and thus is readily accessible to the user

Latent Data

areas of files that are typically not apparent to the user (latent=hidden)

what does a forensic investigator do with digital information retrieved from a crime scene?

create a forensic image

Temporary files and swap space

created by programs "back up on the fly"

HDD (Hard Disk Drive)

is a data storage device that uses magnetic storage to store and retrieve digital information using one or more rigid rapidly rotating disks (platters) coated with magnetic material.

what happens when the hdd is partitioned

its mapped or formatted to have a defined layout.

The use of computers and electronic devices

leave footprints and data trails. Involves preservation, acquisition, extraction, and interpretation of computer data.

what is the first step of the hdd

partitioning

what is the final step in the hdd

swap space can yield evidentiary data.

CPU (Central Processing Unit)

the brain of the computer

motherboard

the main circuit board of the computer

RAM

volatile memory that stores the running configuration and tables as generated by the device

what is the main goal of the hdd

without altering even one bit of data. Don't boot the hdd obtain the data.