Principles of digital analysis

  Directions: Follow the download step and then fully answer each of the questions. First: Download the enclosed image. Using a search tool, locate the enclosed list of words in the image. Suggested search tool: https://www.autopsy.com/download/ After doing the above, answer/do the following questions/prompts: Record the offset or screen shot of their location and place them in a document. Identify and discuss three examples of how searching for a string or part of a string can be valuable in an investigation? Describe a strategy for searching a device with only part of a person’s name. In describing the strategy, address what you would look for and why and how you would search if the partial name was found on a deleted document. Also discuss two pros and two cons of this strategy. Discuss the particularity requirement of the fourth amendment and its application to computer searches. Specifically, assuming that a person who is subject to the search and seizure of their computer as a reasonable expectation of privacy in the contents of the computer (therefore requiring a warrant), how should the particularity requirement be applied to computer searches? Describe why establishing a baseline in memory forensics is important; and equally, describe how rogue processes are identified and why is it important to understand them.