Week 3 Discussions CIS-562

Week 3 Discussion 1

"Data Acquisition and RAID" Please respond to the following:

1. Describe at least three challenges of performing data acquisition on a device using a RAID (Redundant Array of Independent Disks) disk configuration. Determine whether or not you believe any one RAID configuration presents more challenges than the others and provide justification.

    

2. From the e-Activity, thoroughly describe the RAID data acquisition forensics tool you researched, including at a minimum its functions, advantages / disadvantages, and cost. Explain why you would consider utilizing this tool as a system forensics specialist, and provide a scenario where this tool would assist you in an investigation.

Week 3 Discussion 2

"Live System Forensics" Please respond to the following:

1. Explain in your own words why there is a need for live system forensics and discuss how this type of analysis improves on static system forensics analysis. Describe the challenges with data consistency and why this is an area of concern for system forensics specialists.

1. Analyze the four acquisition methods to determine whether or not these methods are suitable for live data acquisition. Outline the process you would take to determine the best acquisition method for live system analysis.