I INF 306 Lecture Notes - Lecture 9: Digital Forensics, Forensic Pathology, Mens Rea
Document Summary
Where sciences meet law: various forensic disciplines, controlled substances, digital evidence and forensics, forensic anthropology and forensic dentistry, forensic applications of microbiomes, forensic dna, forensic pathology, forensic toxicology, impression and pattern evidence, questioned documents, trace evidence. Stages of a digital investigation: used for investigations for, cybercrimes, physical crimes, civil matters. Different types of evidence: federal rules of evidence (fre, fed. r. evid. 1002, best evidence, testimony of a witness, physical evidence, electronic evidence, admissibility, taint, suppression, inculpatory and exculpatory. Forensic accounting: material false statement, demonstrating intent, mens rea, motive, opportunity, repetition, concealment, internal and external, sox section 302. Prove probative potential: relevance, privilege, expert opinions, hearsay, business records rule exemption, 803(6, authentication. Where to find cyber-evidence: traditional digital forensics, computer forensics, network forensics, multimedia forensics, memory forensics, live analysis, post-mortem analysis. Where os puts stuff: ms windows, registry, suffixes, hidden files (vs. linux hidden files, swap space / pagefile, temporary files / application cache, user command history, unmounted partitions.