memory anali and windows for

Learning Objectives and Outcomes

 Outline the proper steps to be performed in examining a laptop computer for evidence of a crime.

Assignment Requirements

You are an experienced digital forensics specialist for DigiFirm Investigation Company. The local police are investigating a man who they suspect is distributing child pornography. They have seized his laptop computer, which runs the Windows 7 operating system. The police are shorthanded and have contracted with DigiFirm to assist with the forensic investigation of the laptop. Chris, your team leader, has asked you to assist with the case.

There are several examinations you can complete on a computer running Windows 7. Before beginning any digital forensics investigation, it’s a good idea to plan your approach.

For this assignment:

Write a report that outlines the steps to be performed in examining the laptop for evidence of the crime, in order of importance. Be sure to explain why certain steps must be performed before others.

Required Resources

· Course textbook

· Internet

Submission Requirements

· Format: Microsoft Word

· Font: size 12, double-space

· Citation Style: Follow your school’s preferred style guide

· Length: 1 page

Self-Assessment Checklist

· I researched the process of examining a computer running Windows 7 for evidence.

· I outlined the steps, in order of importance, to be performed to locate evidence on the computer.

· I explained why certain steps must be performed before others.

· I created a professional, well-developed report with proper documentation, grammar, spelling, and punctuation