Question

Key activities with on-scene and seizure include securing and processing the scene.

Research the activities involved in securing and processing the scene in order to support prosecution effectively.

write one page discussing your findings give at least two examples where the incorrect procedures hindered or destroyed the prosecution of the perpetrator.

Answer 1

Data Forensics:

• Data Forensics is an study of the digital data in order to investigate towards any crime or unethical activity that is been done using digital media or access.It is an important study which is completely based on the evidence to prove the alleged crime.
• In data forensics, there are multiple things to be taken care of rather it be an crime scene or any normal crime scene. Each and every step in data forensics have it's individaul importance and sometimes are dependent on each other.
• Some of the tasks that we have to undergo while doing data forensics are as follows:
  • Recovery of Data
  • Recovering Passwords
  • File Filtering
  • File Carving
  • Timeline Analysis
  • Registry Analysis
  • Email & Internet Analysis
  • Mobile Analysis
  • Network Analysis
• With the help of the above techniques one can successfully find some evidence and clues to solve the case faster and with extreme efficiency.
• All the above written techniques must be handled with extreme care as there are more chances of failures and data forensics comes under one of the most delicate parts of researching technique where failures are more common.
• The first and foremost task of an forensic expert is always to get to the point first so that nothing is pampered or alternated by any individual or organization because device status remains one of the most important things here.
• It is very important that all the devices must not be handled or manipulated until and unless the forensic team arrives, so that it becomes easy for them to access information without any problem.

Example:

• When in the crime scene, there is an group of cops who are been moving devices from one place to another by unplugging them from the power. This is the time when the system goes into the parched state and then it sometimes becomes hard to know where to search for.
• When there is been an crime scene and the data forensics team is required to do some paper work for just to start investigating. The time which has been delayed will cause many changes to the system and the more late it gets to perform computer forensics it gets worsen.

Hence, these are the conditions where the incorrect procedures hinder the prosecution of the perpetrator.