Question

Conduct research for information about the importance of computer/cyber forensic investigation plan in the forensics field.

- What should be included in the scope of a computer/cyber forensic investigation plan?

- What is the purpose of this plan?

Answer 1

Answer)

The role or the importance of the computer/cyber forensic investigations are as follows:

1) It helps in many criminal investigations with the help of tools and techniques

2) It acts as a computer forensic tool and tasking which can help in investigating the encrypted files and methods with many of the types of softwares which are being used with the latest technique present

3) The cold cases get solved by using the forensic science

The tools and technique which should be included for the investigation plan are as follows:

1) Rootkit revealer which is used for detecting the user mode and the kernel mode root kits

2) Process explorer for finding the useful information about the running process, load the libraries and the used resources

3) TepView is used for displaying the network connections

The purpose of this plan is to solve the cybercriminal cases and investigate the criminal associated and also to make the organization aware of the loop holes to solve it before it gets breached again.

If you found the answer useful, hit like
Hope this answer helps.
Thanks