Using Wire Shark Website ( Network Forensics ) Essay

To record a crime scene, forensic scientist can use photography, drawings, and videography. Photographs are an important record of the unaltered crime scene, Drawings or sketches provides valuable information when a photograph cannot accurately depict the scale of a room or the relationship of items to each

7) Pollen & Spore identification can provide important trace evidence in solving crimes dues to their

Protocol capture tools and protocol analyzers are important tools for an information systems security professional. These utilities can be used to troubleshoot issues on the network. They can verify adherence to corporate policies, such as whether or not clear text privacy data is being sent on the network. They can be used to test security countermeasures and firewall deployments and are needed to perform audits, security assessments, network baseline definitions, and identification of rogue IP devices.

I think that the most interesting responsibility of a forensic scientist would be analyzing the data. I would always want to be the one to piece together a puzzle, and to solve a crime to figure out exactly what happened in a case. I think that it would be challenging, but it would also be interesting to join in on a case and examine and analyze the data to figure different things out.

Instructions: There are multiple parts to this assignment. Carefully read each section and type your answer in the space provided. Complete each part of this Homework Assignment to receive full credit.

3. If you were in charge of retrieving bullets at a crime scene, what steps would you take to retrieve a bullet and take it to the crime lab?

1.What is a questioned document? Describe at least one example of something that might be a questioned document.

Security is the heart of internetworking. The world has moved from an Internet of implicit trust to an Internet of pervasive distrust. In network security, no packet can be trusted; all packets must earn that trust through a network device’s ability to inspect and enforce policy. Clear text (unencrypted data) services represent a great weakness in networks. Clear text services transmit all information or packets, including user names and passwords, in unencrypted format. Services such as file transfer protocol (FTP), email, telnet and basic HTTP authentication all transmit communications in clear text. A hacker with a sniffer could easily capture user names and passwords from the network without anyone’s knowledge and gain administrator access to the system. Clear text services should be avoided; instead secure services that encrypt communications, such as Secure Shell (SSH) and Secure Socket Layer (SSL), should be used. The use of routers and switches will allow for network segmentation and help defend against sniffing

Kyllo v. United States, 533 U.S. 27 (2001) A device that is used to monitor a space without physically intruding upon it is a

There are couple reasons when running Snort IDS there might be no alerts. The first one could be related to settings because the administrator has to set Snort IDS to its optimum settings in order to get any alerts. Since Snort works by ruleset, it can be mistakenly set up to a port other than what the network is using. The mistake can be done by either keeping the Snort default settings, or when users try to adjust them to their own network requirements. The point is when changing Snort default settings to rules other than what the website provided, the administrator might have disabled a packet sniffing on a specific port

* Receive the equipment from the Seattle Police Department with the chain of custody form

to see if the suspect is anywhere around then they checked to determine the two

As the InfoSec Specialist, you wouldn’t be looking for a search warrant before going into his work area. “It is important to note that

Cyber Crime is described as criminal activity committed via use of electronic communications with respect to cyber fraud or identity theft through phishing and spoofing. There are many other forms of cyber-crime also such as harassment, pornography etc. via use of information technology.

A good place to begin with any examination is with the statistical and metadata information that can be uncovered within the packet capture. Using Wireshark Protocol Hierarchy Statistics, we can see that the traffic consists mainly of DNS datagrams (figure 1).