Computer Forensic Analyst (Model Examinations): Difference between revisions
m 1 revision imported |
m Text replacement - "'''([a-zA-Z]+ [a-zA-Z]+ [a-zA-Z]+ [a-zA-Z]+)'''<br>" to "; $1" |
||
| Line 149: | Line 149: | ||
|- | |- | ||
| | | | ||
; Contents of the Computer | |||
* found any files that were relevant to the case | * found any files that were relevant to the case | ||
* types of files (pictures, videos, documents) | * types of files (pictures, videos, documents) | ||
| Line 173: | Line 173: | ||
* signs of customized operating system, desktop, etc. / how much different did set up look from the default installation out of the box | * signs of customized operating system, desktop, etc. / how much different did set up look from the default installation out of the box | ||
; Other Potentially Relevant Information | |||
* details on the software packages installed on the machine | * details on the software packages installed on the machine | ||
* details regarding OS installation (time and date, by whom) | * details regarding OS installation (time and date, by whom) | ||