476-W2

Collecting Evidence

As the Digital Forensic Manager at Triton Corporation, you receive a request from the Internal Affairs Director that an employee was found to be looking at inappropriate images of children engaged in sex acts. The images were supposed to be on a 10 gigabyte USB drive that was confiscated by the IA Director. The Director advises that the USB drive is the property of the Triton Corporation and that the employee signed a waiver of rights allowing the USB drive to be examined.

Compose a 2-3 page paper outlining the steps you’ll take to obtain the USB drive from the IA Director, and explain the options you have for making a forensic copy of the USB drive accurately, including your software and media choices.

Please compose paper in APA style format and include 2-3 cited sources of information.