ITN 276 - Midterm (Quiz 1-4) Download To Score An A+

Which of the following is the definition of anti-forensics? The process of searching memory in real time, typically for working with compromised hosts or to identify system abuse. Data stored in written form, on paper or in electronic files, such as e-mail messages and telephone calldetail records. The process of acquiring and analyzing information stored on physical storage media, such as computer hard drives or smartphones. The actions that perpetrators take to conceal their locations, activities, or identities. The actions that perpetrators take to conceal their locations, activities, or identities. What is meant by chain of custody? Information that helps explain other evidence. An example is a chart that explains a technical concept to the judge and jury. The use of analytical and investigative techniques to identify, collect, examine, and preserve computerbased material for presentation as evidence in a court of law. The continuity of control of evidence that makes it possible to account for all that has happened to evidence between its original collection and its appearance in court, preferably unaltered. Dictate that only methods and tools widely accepted in the scientific community can be used in court. The continuity of control of evidence that makes it possible to account for all that has happened to evidence between its original collection and its appearance in court, preferably unaltered.