Which concept can best help determine if evidence has been tampered with?
Logs
Hashing
Back-up copies
Firewalls
True or false: Digital forensics is only used after breaches requiring criminal investigation.
True
False
During a July investigation in Nevada, a hard drive with evidence on it was placed in a car for several days with no air conditioning. At what phase did the investigator fail?
Collect
Preserve
Analyze
Report
Next Concept