Assignment and Study Guide for CISS360
Chapter One
Terms
- affidavit
- A notarized document. Under the penalty of perjury. Can be a declaration when the document in not notarized.
- allegation
- charge made before proof
- approved secure container
- A fireproof container locked by a key or combination
- attorney-client privilege(ACP)
- client information divulged to an attorney is confidential
- authorized requester
- Private domain: has the right to request an investigation.
- bit-stream copy
- A bit by bit duplicate of data on the original storage medium. Known as acquiring an image or making a forensic copy
- chain of custody
- The path that evidence takes from the start of an investigation until closed.
- Computer Technology Investigators Network(CTIN)
- Pacific Northwest group of investigators that collaborate on better investigative techniques
- data recovery
- recovering deleted files
- Digitial Evidence Specialist(DES)
- One who collects and protects the integrity of the data/evidence
- digital foresnics
- providing evidence through investigative procedures for legal purposes
- evidence bags
- Non static bags used to transport any computer components or digit devices
- evidence custody form
- A hard copy form showing who checked evidence in/out
- exculpatory evidence
- Evidence that indicates suspect in innocent
- exhibits
- Evidence used in court to prove a case
- forensic workstation
- A work station that copies evidence
- Fourth Admendment
- Ensures probable cause for search
- hostile work environment
- A workplace that prevents employees from doing their job due to hostile interaction from others
- inculpatory evidence
- Evidence that indicates suspect is guilty
- industrial espionage
- Theft of valuable proprietory information/data/ or products from a company that is
- International Association of Computer Investigative Specialist(IACIS)
- Software creators for digital forensics
- interrrogation
- Attempting to get a confession for a specific incident or crime
- interview
- Conversation conducted to collect information from a witness or suspect to verify related facts
- line of authority
- Order by which a problem in elevated through ranks. Each rank
has the legal right to investigate and possess/control/access evidence
- multi-evidence form
- Evidence custody form used to list all items associated with a case
- network intrusion detection and incident response
- Detecting attacks from intruders by using automated tools and manual processes.
- professional conduct
- Expected behavior of a professional supporting ethical behavior and integrity.
- repeatable findings
- Duplicating a result continually to insure accuracy
- search and seizure
- Obtaining evidence legally
- search warrants
- Legal document providing the investigators the right to examine private property to support or prove an allegation
- single-evidence from verdict
- Form attached to each piece of evidence. Provides a log of evidence handling to ensure integrity of the evidence
- vulnerability/threat assessment and risk management
- Weakest points of an attack surface. Covers all types of security
- warning banner
- Provides instruction to the user for the proper use of the company computer
- white-collar crimes
- Financially motivated non violent crime. Typical white-collar crimes could include wage theft, fraud, bribery, Ponzi schemes, insider trading, labor racketeering, embezzlement, cybercrime, copyright infringement, money laundering, identity theft, and forgery
Review Questions