Protecting Computer Information During Fraud Investigation

Essay Questions
Student’s Name
Professor’s name
Institutional affiliation
Course Title
Date
Essay Questions
Protecting Computer information During Fraud Investigation
* Timely obtain passwords allowing accessibility of encrypted and password-protected files or documents, when possible.
*  Imaging a drive: this is a forensic process involving creating a bit-for-bit duplicate of a drive. Imaging a drive culminates in the forensic image, which encapsulates and preserves the digital media to retain evidence for the investigation (Quick & Choo,2016).
* When examining the image, it should be noted that it is possible to recover data from even wiped drives.
* Generation of hash values: this entails the production of cryptographic has values, specifically MD5 AND SHA-1 (Ratna et al., 2013). The hash values function in authenticating the image that is a precise duplicate of the original media or data.
* An investigator should collect data from the client and transfer it when needed or necessary. This information transfer should be documented as evidenced on Chain of Custody (CoC) forms. Relevant signatures should ...