A major federal intelligence agency has tasked your computer forensics team with performing a remote acquisition, required to do real-time forensics analysis of a possible terrorist cell operating at one of their satellite offices.
The intelligence agency does not want the suspects to be aware of the ongoing investigation, so you are to identify in the presentation how the investigator will acquire the remote suspect without compromising the investigation. In addition, identify the real-time forensics procedures and actual tools (e.g., Encase Enterprise) used for computer imaging, image verification and authentication over the network. Before performing the real-time forensics activity, the intelligence lead would like a presentation on how the forensics team will execute this investigation.
Provide the forensic real-time acquisition strategy in a presentation so the intelligence lead will understand the tools and processes used in the investigation. Make sure to include the following in your presentation:
Assignment Guidelines
- A title page
- A presentation including the following:
- A title slide
- A Topics of Discussion Slide (Introduction) detailing the major points of the presentation
- How the investigator will acquire the remote suspect without compromising the investigation
- An identification of the real-time forensics procedures and actual tools (e.g., Encase Enterprise) used consisting of computer imaging and image verification and authentication over the network.
- A conclusion to the presentation restating the overall strategy
