First Response - Digital forensics

You have been assigned to investigate whether or not an employee at a local hospital has been accessing patient records and setting information to online pharmacies. It is your first day of the investigation. Put together a list of data sources that must be examined during the investigation.

Resources:
Read Chapter 6 of the Graves, First Response and the Digital Investigator

Primary topics:

• Comparing digital and physical evidence
• Handling evidence
• Computer systems
  https://youtu.be/ZUqzcQc_syE