- Varies case to case.
- Internet :- browser history , cache files , downloads
- OS :- presence of root kits , user accounts , installed software
- Know the case -> list possible areas/locations of contact -> investigate that areas/locations
- Search Techniques
- Name of the file
- Type of the file
- File related Timestamps
- #values in case of known files.
2.2.2 Evidence Searching Phase
-
Physical address is address of the sector with respect to start of physical media. One way of addressing was to mentioning plate number , tr...
-
CPU Central processing unit or processor. Can process assigned job. but cant create job for itself. OS assigns job to CPU. CPU picks up inst...
-
How computer stores sentence ? Computer does not know characters and symbols. Computer has a unique numerical value for a symbol. Computer k...