Ethics Case Study: Forensic Investigation

The hard drive is extremely hard to “break into” to view the contents. There is no real easy way to access the information and the investigative options then become very limited.

You can remotely connect to a suspect computer via a network connection and copy data from it

The Federal Bureau of Investigation (FBI) has the reputation as the world’s premier law enforcement agency with a vision to stay ahead of the threat through leadership, agility, and integration. (FBI's Strategy, 2017). As an intelligence-driven and threat-focused national security organization, the mission of the FBI is to protect the American people by upholding the Constitution of the United States, defend the US against terrorist and foreign intelligence threats; uphold and enforce the criminal laws of the US; and provide leadership and guidance of criminal justice services to federal, state, municipal, international agencies and partners. (Today's FBI Facts & Figures, 2014).

What ethical conditions might be involved with either Sierra Golden or Bottle Time Inc. that would make it impossible to continue to collaborate or to accept the funding? Please indicate which principle of the Prevention Code of Ethics may

Imagine that you are investigating a case where the suspect is believed to have deleted information from his or her computer that might be evidence. Where would you look for this evidence?

By performing the tasks required in this lab, many other attributes, references, and system information was gleaned that will benefit forensic efforts in the future. For this lab, the time zone of the computer has been isolated to China Standard Time, which in itself is suspicious. BHOs and add-ins were also located using registry values. Among this, there was only a reference to Bing Bar, which was identified in an earlier lab as a download performed on Jane’s computer. Moreover, this lab uncovered startup applications (UPnP.exe and SCVHhost.exe) that were identified as potentially suspicious in previous labs. Lastly, this lab allowed the student to locate USB storage devices that were connected to Jane’s system as well as the times associated with the connection and removal of the device in the system’s

2. Explain, from a forensics perspective, the digital evidence found on the Anthony family computer

For example, you can use Internet forensics to determine whether inappropriate Internet content access and downloading were accidental.

For this reason, it is imperative that the information gathered is reliable and accurate to ensure the evidence collected can be utilized by the digital forensic investigator for the current case (Ingalls & Rodriguez, 2011). Additionally, cyber incidents require digital forensic investigators to interview various individuals regarding the information needed for the case. According to the National Institute of Justice (2004), interviewing the system administrator, users, and employees of an organization regarding a cyber incident would provide investigators with valuable information; for example, user accounts, email accounts, network configuration, logs, and passwords. Furthermore, for digital forensic investigators to conduct an effective interview, they must have the proper tools and training to employ the interview process. For instance, formal procedures or instructions should be developed and implemented to ensure that the investigator follows a standard during all investigations. Additionally, training should be provided to ensure that digital forensic investigators comprehend by what means to prepare, conduct, and evaluate an interview. Furthermore, resources should be made available for digital forensic investigators to accomplish their tasks; for example, recording devices and references. Also, definitions should be provided to the digital forensic investigators for

Forensic science is defined as the practice of utilizing scientific methodologies to clarify judicial inquiries. The field of forensic science contains a broad range of disciplines and has become a vital aspect of criminal investigations. Some forensic disciplines are laboratory-based; while others are based on an analyst’s interpretation of observable patterns (Kourtsounis, 2009). According to the Innocence project’s website; in greater than fifty percent of wrongful convictions, the use of invalidated or improper forensic techniques played a role in cases; which were later

When was the last time she accessed her computer? What is her background in computers, what is her skill level? I need some background on the former employee, her computer habits and activities prior to the files being found on her computer. I must collect digital evidence while keeping the data unaltered, first thing. This data will be used later in the prosecution of the case. This can be done through calculating and recording an evidence file. Next is imaging of the computer media with a write-blocking tool. I must keep the chain of custody. The computer's RAM is examined for evidence. During the examination step, verify and catalog the presence and integrity of the original evidence and any copies. An analysis is made with specialized equipment to find out exactly what's stored on the digital media. This includes a manual review of all materials found on the media, a review of the Windows registry, techniques to crack passwords and retrieve protected data, keyword searches and extraction of email and pictures for further review.

Build a mirror CRM production system over the next two weeks so that a rebuilding of the main CRM system could occur to plug security holes and assure that another DoS attack would not be successful.

The ethical dilemma is a situation by which it’s difficult to determine whether a situation is can be handled without disappointing both sides. Therefore, an ethical dilemma exists when the right thing to do is clear or when members of the healthcare team cannot agree on the right thing to do. Ethical dilemmas require negotiation of different points of view (potter, Perry, Stockert, & Hall 2011pg 78).

In a world where technology is increasingly becoming the way of life, it was only a matter of time before crime was no longer just in the streets but happening online as well. Criminals now get a new approach to carry out their crimes with the use of computers. Since technology is more like a murder mystery than catching the bad guy in the act, a new discipline of forensics needed to be put into place. This is known as computer forensics. Forensic science is any science used for the purpose of law. In the case of computer forensics it is “the discipline that combines elements of law and computer science to collect and analyze data from computer systems, networks, wireless communications, and storage devices in a way that is admissible as evidence in a court of law” (U.S. Cert, 2008). Meaning if you do something illegal on the Internet it can be found.

This report includes a review of potential misuse of a computer. On May 30, 2016, Joe Ballard, the HR Director, contacted the Information Technology (IT) Department to have one of the forensic investigators to complete an investigation into potential misuse of company computer systems. Kurt Clark, a digital forensic investigator, was assigned to the case. The investigator met with Mr. Ballard on May 30, 2016 to discuss the case. It was explained how Tim Norman was suspected of stealing other employee’s identities and running a side business during work hours. Tim Norman’s manager provided information concerning access to the computer system. The virtual machine was examined and one file containing Malware was found, but no Malware was identified on the virtual machine. In addition, two files were located which pertained to the misuse of company computers. One file had what appears to be credit card numbers and the other file has what appears to be social security numbers in it.