Questions from Crime and Investigation


Q: You are investigating a case in which an accountant is accused of

You are investigating a case in which an accountant is accused of keeping fraudulent books for a firm. Upon examining his computer, you notice that the suspect uses two different accounting programs t...

See Answer

Q: What kind of search pattern(s) would investigators be most

What kind of search pattern(s) would investigators be most likely to employ in each of the following situations? a. Two people searching a small area with well-defined boundaries b. Several people sea...

See Answer

Q: You are examining two computers to determine the IP address from which

You are examining two computers to determine the IP address from which several threatening e-mails were sent. The first computer uses Microsoft Outlook as an e-mail client and the second uses a web-ba...

See Answer

Q: What precautions should the examiner take when seizing/ analyzing a live

What precautions should the examiner take when seizing/ analyzing a live, turned-on mobile device?

See Answer

Q: Differentiate chain of evidence and chain of custody and give examples of

Differentiate chain of evidence and chain of custody and give examples of both in the context of an investigation where mobile devices play an important part.

See Answer

Q: How can law enforcement make use of the locations of cell phone

How can law enforcement make use of the locations of cell phone towers?

See Answer

Q: How are today’s generations of mobile devices different from and the same

How are today’s generations of mobile devices different from and the same as personal computers?

See Answer

Q: What are SIMs and SD cards and why does a mobile device

What are SIMs and SD cards and why does a mobile device need them? Do all mobile devices have one or both of these? If not, what substitutes?

See Answer

Q: What is the IMSI, where might it reside, and what

What is the IMSI, where might it reside, and what is it used for? How would the digital forensic investigator use it?

See Answer

Q: If there is a GPS capability on a smartphone, how might

If there is a GPS capability on a smartphone, how might the investigator make use of it? Is it useful for correlation? What kind and how would such correlation be accomplished?

See Answer