DeVry CCSI 410 Week 7 Lab Expert Witness and Reporting Solution

DeVry CCSI 410 Week 7 Lab Expert Witness and Reporting Solution

BUY HERE⬊

http://mxstudent.com/devry-ccsi-410-week-7-lab-expert-witness-and-reporting-solution/

CCSI 410 Week 7 Lab Expert Witness and Reporting (DeVry)

Task 1- You are given an .001 file for this investigation. What is the difference between a .001 file and the actual physical floppy disk? What must have happened prior to this step?

Task 2 - On the Processes to Perform page, you were asked if you would like to perform a KFF Lookup. What is a KFF lookup and when is it important?

 Task 3, - Is there any evidence on the suspect’s floppy disk? Would you see this evidence just looking at the floppy using Windows Explorer? Why or Why not? What other tools could you use to retrieve the evidence?