What is the first common task when handling evidence?
Which type of hardware is never of interest to an investigation?
When attempting to prove that an individual used a computer, what clues might computer hardware provide?
In addition to hard disk drives , where else might data containing evidence reside?
Should handwritten notes be considered in a computer forensics investigation?
What is the primary concern in evidence collection and handling?
Can you analyze a system that is intact and running?
What happens when a PDA's battery runs down?
What device prohibits any changes to a hard disk drive?
How can you prove that you made no changes to a disk drive during analysis?