Digital Forensics and Cyber Crime Reporting

What two fields does digital forensics combine?

• Law and Psychology

• Computer Science and Law

• Forensic Science and Medicine

• Cybersecurity and Physics

Why is digital forensics becoming increasingly important?

• Because traditional crime-solving is outdated

• Because cyber crimes have skyrocketed

• Because technology is easy to hack

• Because social media is growing

What is the first step when discovering a cybercrime?

• Collecting your own evidence

• Reporting the incident immediately

• Deleting any suspicious files

• Shutting down your computer

Who should cybercrimes be reported to?

• Local police, IT departments, or cybersecurity agencies

• Social media companies

• Internet Service Providers (ISPs)

• Friends and family

What are the four main stages of digital forensic investigations?

• Identification, Preservation, Extraction, Analysis

• Research, Testing, Execution, Reporting

• Detection, Erasure, Encryption, Validation

• Scanning, Tracking, Recovering, Testing

Why is preservation important in digital forensics?

• It prevents tampering with data

• It helps encrypt data for safety

• It makes data more readable

• It speeds up the analysis process

What is done during the extraction phase?

• Data is encrypted for protection

• Deleted and hidden files are retrieved

• Cybercriminals are tracked in real-time

• The original data is permanently erased

What does the analysis stage focus on?

• Deleting all evidence

• Mapping out patterns, anomalies, and connections

• Formatting devices for new investigations

• Removing unwanted data from the system

What is the purpose of disk and data capture tools? (5:02)

• To scan for viruses

• To create a snapshot of data for analysis

• To permanently delete files

• To format hard drives

What is a common tool used for data capture?

• WireShark

• Autopsy

• FTK Imager

• Windows Registry