Week 2 (Investigative Process)

Question 1

Steps in Forensic Investigation .

(C.D.O| P.P.G | P.S.A |P.S.I)

How many steps are there ? How many steps does first respone procedure have ?

Answer 1

C.D.O
Step 1 : Crime is suspected
Step 2 : Do Premilinary Assesment of the case
Step 3 : Obtain Search Warrant for Seizure (if needed)

P.P.G
Step 4 : Peform First Response Procedures at the crime scene (involves 6 steps)
Step 5 : Perform forensics duplication/imaging at forensic lab.
Step 6 : Generate MD5 checksum (hash) on the images.

P.S.A
Step 7 : Prepare chain of custody (may have already started at crime scene)
Step 8 : Store the evidence in a secure location . (In evidence bag)
Step 9 : Analyze the image copy for evidence

P.S.I
Step 10 : Prepare relevant forensic report
Step 11 : Submit the report to the clients
Step 12 : If required , attend court and testify as an expert witness.

Question 2

Investigative Preparation
Question: What should a forensic investigator determine before starting an investigation?

Answer 2

Answer: The forensic investigator should determine the occurrence of the incident and its impact.

Question 3

What are two key things to know when assessing a crime scene?

Answer 3

1. Know what to look for at the crime scene.
2. List the steps to be taken during the investigation.

Question 4

Why should digital evidence be assessed with respect to the scope of the case?

Answer 4

Answer: To determine the appropriate course of action to take.

Question 5

What makes evidence appropriate for court admission?

Answer 5

Evidence should be relevant and admissible:

1. Relevant evidence: Proves or disproves the facts in a case.
2. Admissible evidence: Conforms to regulations and statutes governing its collection.

Question 6

What factors should be considered when prioritizing evidence?

Answer 6

1. Location of evidence at the crime scene.
2. Stability of media to be examined.

Question 7

What methods can be used to document evidence?

Answer 7

Photographing, sketching, and taking notes.

Question 8

Why is it important to evaluate storage locations for electromagnetic interference?

Answer 8

To ensure that stored evidence is not compromised or damaged.