Advantages And Disadvantages Of Digital Investigation Models

In a criminal investigation, there is the need to break down two things. Firstly, the investigation itself and secondly the investigator involved. It is of utmost importance that the criminal investigation is done accurately, failure to do so will have negative consequences on the society. Investigation involves the collection of facts, scenarios and situations which are directly or indirectly related with the case. Whereas investigator is the person who should observe, question, analyze and scrutinize the available details. Careful evaluation then helps to achieve the much needed evidence. Criminal investigation is one of the most essential functions of the Law Enforcement agencies, as it is their prime responsibility to maintain a secure environment and

The procedures and techniques used in any criminal investigation help the investigators to do their investigation properly. By correctly following the investigative stage, the investigators can improve the quality of their case and investigation and the police will get a better chance to solve any criminal case. In any criminal investigation, five stages are involved. The police and investigators have the duty to follow all this stages, in order to get the best results.

When the GCU gathers evidence for later use for the court, sources of evidence can be monitored to detect threatened incidents in a timely manner. The GCU employee’s needs to be aware of suspicious transaction related to any activity in the customer account. Securing intrusion detection systems (IDS) components are important because IDS are often targeted by attackers that want to prevent the IDS from detecting attacks or want to gain access to sensitive information on the IDS, such as host configurations and known vulnerabilities. In monitoring and auditing, the types of activities recognized as suspicious will be different from different business needs. For example, a forensic accountant may look for specific patterns of financial data to trigger suspicion of fraud or theft. A suspicious event might be multiple emails on a sensitive subject from a person that is not involved in the subject. Recommend resources that can be used

The crucial step of the investigation is the transport and storage of evidence recovered from the crime scene. Tightly controlled access during transport and storage will prevent any unauthorized contact and possible tampering or loss of evidence. The evidence that is recovered at the scene must reach a forensic laboratory as quickly as possible, appropriate conditions will prevent deterioration of evidence during transport and storage. Evidence might have to be stored for some years until a case goes to court or if the case is unsolved so labelling and storing evidence must be appropriately done to avoid contamination or disintegration etc.

Crime Investigation is an important aspect of the law enforcement in any country. It is considered as the most vital aspect of legal system as both the law and order as well as justice system is dependent over the quality of crime investigation in the country. Not only that. There are several aspects related directly or indirectly with the phenomenon of crime investigation. An example of that may include the fact that a strong criminal investigation system helps prevail a sense of justice in the country which in turn reduce the rate of crime owing to fear of getting caught.

For this reason, it is imperative that the information gathered is reliable and accurate to ensure the evidence collected can be utilized by the digital forensic investigator for the current case (Ingalls & Rodriguez, 2011). Additionally, cyber incidents require digital forensic investigators to interview various individuals regarding the information needed for the case. According to the National Institute of Justice (2004), interviewing the system administrator, users, and employees of an organization regarding a cyber incident would provide investigators with valuable information; for example, user accounts, email accounts, network configuration, logs, and passwords. Furthermore, for digital forensic investigators to conduct an effective interview, they must have the proper tools and training to employ the interview process. For instance, formal procedures or instructions should be developed and implemented to ensure that the investigator follows a standard during all investigations. Additionally, training should be provided to ensure that digital forensic investigators comprehend by what means to prepare, conduct, and evaluate an interview. Furthermore, resources should be made available for digital forensic investigators to accomplish their tasks; for example, recording devices and references. Also, definitions should be provided to the digital forensic investigators for

A computer forensic investigation typically includes the collection, examination, analysis, and reporting of data. These steps could have been used to extract and preserve the data in the U.S. versus AOL case. Collection involves seizing digital evidence. Examination is where techniques are applied in order to identify and extract data. Analysis is using the data and resources to prove a case (Brecht, 2015). Reporting involves presenting the documentation gathered during the investigation. Investigators use these steps to examine evidence that could be needed in a trial. Following these steps is one way to ensure that the findings are sound and admissible in court. “The purpose of a computer forensic examination is to recover data from computers seized as evidence in criminal investigations (Brecht, 2015)”. Forensic tools are used by investigators to provide their collection, indexing and detailed analysis

The aim of this report is to examine Computer Forensics and Anti Forensics in details, investigation and Analysis techniques, and standard set of procedures which Forensics investigators must follow

The research for this paper revealed several articles containing proposed frameworks that combine the approaches outlined above in the effort of offering the greatest analysis efficiency alongside data privacy protection. This section focuses on outlining the proposed frameworks, the positive aspects, and any known challenges. Gupta (2013) approaches privacy protection during the forensic investigation process by proposing a framework based on the logic that criminal behavior and evidence remains similar from case to case. The framework consists of three modular stages of an Expert System, Evidence Extraction, and Ranking. The Expert System is a database comprised of historical digital crime cases, case profiles, and stored images of the

Before the reporting of the actual work done can start, it is important to include a section with the terms of reference. This explains the technical terms that is not generally known and any acronyms it might appear in the report. This is important for any readers that are not familiar with forensic terminology.Next a short background to the investigation must be given for the benefit other readers who are not familiar with the case the case.After the background is given, a section on the mandate must be included. This needs to explain who requested and authorized the investigation.It is also important define the scope of the investigation clearly, so that it is clear that the investigation did not venture outside of the legally authorized scope.The evidence must be clearly identified, inclusive of serial numbers and any other identification that can be used to confirm that it is the same as the evidence that was acquired. Where used, the hash codes for the evidence items should also be included to show

The OS provides digital forensic investigators with the primary application where the files, folders, and logs of every event that has occurred involving the suspect’s information system can be located. Furthermore, this information can be utilized by the investigator’s to understand how incidents like network intrusion, malware installation, and insider file deletions have occurred. As a result, OS’s is the location where relevant information on incidents or unlawful activities can be discovered with the proper collection and examination

In this essay I will be talking about the key guidelines when it comes to investigating computer related crimes, such as what kind of the sections and sub-sections the offence falls under when regarding the ‘law’. I will also analyse the principle that will apply when dealing with the collection data using the digital forensic unit to analyse the data, more so how this is used to make accurate judgment on why the data was in this location and what its purpose or intended use was. Furthermore I will address what kind the authority the ACPO are granted, and further dissect the responsibilities the chief commissioner has. Lastly I will be addressing one the biggest computer related crimes which Cyber Crime and how ACPO created a method for dealing with such crimes, such as dividing the crime into two different categories of Cyber Crime, and how they differ from one another.

The use of information technology in business presents major security challenges, poses serious ethical question, and affects society in significant ways. Especially, the computer crime is a growing threat to society and is caused by the criminal or irresponsible actions of individuals who are taking advantage of the widespread use and vulnerability of computers and the Internet and other networks. It presents a major challenge to the integrity, safety, and survival of most business systems.

This method contains four main phases which are investigation preparation, Response, collection and securing digital evidence, delivering evidence, confirmation, and examination and analysis. This method can be used when investigating different types of digital devices. The author discussed the method of how to extract online conversation if suspect’s logs go through a web browser. The method provides the process which forensically sounds manner and gives proper handling of online social media investigation.

In simple terms, computer or digital forensic evidence analysis is the scientific collection of data that is either retrieved or held by a computer storage device that can be used against a criminal in a court of law. For the information to be used in court it should be collected before it is presentation; therefore, there are a number of recommendations proposed to make sure that information collected meets the intended integrity.