Blog

The field of e-discovery is specialized, and the software related to it is referred to as a horizontal market, meaning that only a certain type of clientele uses the software.

Colin is examining an x86 computer with a disk drive that uses a Master Boot Record (MBR). What firmware program does Colin need to be familiar with when examining this boot process?

Caleb created a hash value on a file he was working on before he left for the day. When he came back the next day, the hash value had changed. Since there was a change in hash value, what did that do to the file Caleb was working on?

Joe has been tasked with investigating an incident at Zander Corp. What is the first rule he must follow that is important for all investigations, no matter how big or small?

Ambrus is in a discovery deposition. The opposing counsel Mark Miller is just about to finish up. At the end of the session Mark asks Ambrus if he would like to waive signature. Ambrus says no. Why is Ambrus not waiving signature on the deposition?

Billie is looking for a multipurpose tool that can be used as an intrusion prevention system (IPS) and an intrusion detection system (IDS). It should also be usable for network forensics. Which tool should Billie choose?

Ava discovers that Mark, an employee at her company, has been accused of using company resources to start his own business. Ava has been asked to investigate by the human resources department to determine if Mark should be prosecuted. During the investigation, it was determined that Mark is sending emails, creating logos, and sending flyers. What conclusion can Ava draw from this investigation?

Mateo is working with Devo Corp. to build a new forensic lab facility. He knows that he must put a lot of thought into a particular part of the build when determining lab expenses. What expense is Mateo most concerned about?

Debbie is using F-Response Collect while performing a remote acquisition. She needs to create digital forensic images. Since she doesn’t know what team will be reading these images, how will she create these images so they can be read by most forensics programs?

Margo was asked to take a manual snapshot of a hard drive before a data-recovery procedure. Why are snapshots so important to data recovery?