A forensic investigator enters the digital crime scene at a bank and performs the following procedures. One or more of the procedures is incorrect. Can you identify which ones?
1. Secure the device to make sure radio frequencies are blocked.
2. Prevent all unauthorized personnel from entering the area.
3. Check to make sure no commands have been executed to delete data.
4. Get help from a bank official, if offered, to help with the command checks.
5. Document all who had access to the computer.
6. Pack the computer in plastic to prevent it from getting wet during transport.
7. Make a copy of the hard drive and work from the copy rather than the original.
Select one:
A. 4 and 6
B. 6 and 7
C. 6 only
D. 7 only
E. 4 and 7
Answer (2)
The incorrect procedures are Procedure 4, which risks compromising evidence by involving bank officials, and Procedure 6, which suggests using plastic for packing, potentially damaging the device. The best answer is option A. 4 and 6.
;
The incorrect procedures in the investigation are Procedure 6, which suggests packing the computer in plastic, and Procedure 4, which involves involving bank officials in command checks. Both procedures compromise the integrity of the evidence gathering process. Adhering to proper evidence handling protocols is essential in forensic investigations. ;
