8.4. Basics of Cyber Forensics

Try these first

1. 1.

   What does the term 'chain of custody' refer to in cyber forensics?

   Hint

   Think about who handles the evidence.

2. 2.

   Name one tool used in cyber forensics.

   Hint

   Consider software used for analyzing data.

3. 3.

   What is the primary goal of cyber forensics?

   • Collecting evidence
   • Analyzing data
   • Both

   Hint

   Think about all stages of the process.

4. 4.

   True or False: Documentation is not important in cyber forensics.

   • True
   • False

   Hint

   Remember why records matter.

5. 5.

   You are part of an incident response team investigating a major data breach. Describe in detail how you would ensure the chain of custody throughout your investigation.

   Hint

   Consider what steps you must take at each stage of evidence handling.

6. 6.

   Imagine you have to present your findings from a cyber forensic investigation in court. What points would you emphasize to support the integrity of your findings?

   Hint

   Think about how you would defend the processes used during your investigation.