Securing the Scene
The objective of this study is to develop a plan to approach and secure an incident scene and discuss the initial steps taken for an investigation while explicating the importance of creating an order of volatility by identifying the potential evidence that is most volatile and explain how evidence would be extracted. This study will identify the high-level steps that would be performed in collecting and analyzing the evidence including the required steps and what should be avoided in order to maintain the admissibility of the evidence.
Securing the Scene
Securing the scene of a computer crime investigation requires that all electronic devices be secured including personal and portable devices and ensuring that no person unauthorized has access to any electronic devices found at the scene of the crime. The investigator should refuse anyone who offers to assist with anything technical in nature and should remove all individuals from the crime scene where evidence is being collected.
Latent evidence may be found on computer components and these should be preserved. If the computer is switched on or if the investigator is not sure, they should listen for the sounds of any fans running or any spinning drives or look to see if any lights are on. The investigator should also check for signs of remote access and for signs of any active communication, which includes web cams.
II. Documenting the Scene
The scenes should be documented through use of a video or photography and sketching that assist in recreating the details of the scene. Any activity and processes on computer display screens should be documented as well. Scene documentation should include: (1) the entire location; (2) the type, location and position of computers; (3) computer components and peripheral equipment; and (4) other electronic devices. ( )…
