Compare and contrast collecting evidence at a private-sector incident scene and processing a law enforcement crime scene.

Compare and contrast collecting evidence at a private-sector incident scene and processing a law enforcement crime scene. Compare the differences and similarities of evidence seizure and storage procedures for these two types of investigations.

· Determine the purpose of creating a digital hash. Explain in detail the need for this procedure and the potential damage if this critical step is not taken.

· Determine what you perceive to be the greatest challenge when dealing with virtual machines from a system forensics perspective. Provide a rationale with your response.

· Go to the Forensic Focus Website to read the article titled “Virtual Forensics: A Discussion of Virtual Machines Related to Forensics Analysis,” dated 2008, located at http://www.forensicfocus.com/downloads/virtual-machines-forensics-analysis.pdf. , determine how virtual machines can be used as both useful forensic tools and tools to thwart forensic investigations. Decide which of these two uses of virtual machines you perceive is more common and justify your answer.

· Determine the importance of forensic tool testing and validation and if this is a critical component of your forensic operations. Justify your answer.

· Go to the Computer Forensics Tool Testing (CFTT) Program Website located at http://www.cftt.nist.gov/. Review the information regarding tool testing contained within the Website and be prepared to discuss. Discuss the advantage you believe the Computer Forensics Tool Testing (CFTT) provides for system forensics specialists and law enforcement agencies. Determine if the testing of tools is more effective and trustworthy being that it is a function of the National Institute of Standards and Technology (NIST). Decide if the testing of tools by NIST makes the testing more unbiased than if it were performed in the private sector. Provide a rationale with your response.

· Compare and contrast the forensic processes when dealing with Windows-based, Linux-based, and Macintosh-based systems. Explain the challenges of each of these operating systems in regard to system forensics and determine which of these you consider to be the most challenging and why.

· Use the Internet to research at least one commonly used Linux-based system forensics software tool. Research the tool’s primary uses, strengths, weaknesses, costs, system requirements, and who uses the tool. Be prepared to discuss. Discuss the tool’s primary uses, strengths and weaknesses, competing products, costs, system requirements, and whether military, law enforcement and / or private corporations use the tool. Decided whether or not you would consider utilizing this tool as a system forensics specialist. If you would utilize the tool, provide a scenario where it would assist you in an investigation. If you would not utilize the tool, justify your reason why.