Complete the real world exercises at the end of the chapter. Write your answers in complete sentences and use APA formatting rules. Each answer should be a minimum of 1 paragraph (3 or more sentences)
Using a web Browser, perform some research on newer malware variant that has been reported by a major malware containment vendor, using a search engine, go to the vendor’s Web site; this could be Symantec, MCA free, or any of their competitors. Visit one malware prevention software vendor. Search for the newest malware variants and pick one. Note its name and try to understand how it works. Now look for the information about the same malware from at least one other vendor. Were you able to see this malware at both vendors? If so, are there any differences in how they are reported between the two vendors?
Log management and log analysis are techniques used to collect and report on what’s happening on a network. Visit the log management community’s Web site at www.syslog.org. This site is devoted to log management tools and the techniques to use the tools. Click the compliance tab and read the material found there for more information about what are considered best practices for log management.
Depending on copyright, the documentary “The KGB, the computer and Me” may be available for viewing on public video-streaming services. Use a search engine to search for the title and watch it if it is available. (The video remains available as of 2012. It runs about 57 minutes.).
Using a Web search engine, look up “Trojan Defense.” How can it be used to question the conclusions drawn from a forensic investigation?
At the end of 2006, a new edition of the Federal Rules of civil procedure (FRCP) went into effect. Using a Web search tool, learn more about FRCP. What likely effect will its emphasis on electronically stored information (ESI) have on an organization’s need for a digital forensic capability?
Using a Web search tool, identify some common certifications for a digital forensic practitioner and determine whether the certifications are for practitioners at public sector organizations or private sector organizations.
Using a Web search tool, identify cases in which private information was disclosed when computer equipment was discarded. Recent examples have included smartphones (like Black Berry) that were sold without proper data cleansing and hard drives that were sold without data cleansing after the computers they were originally used in where upgraded.