Question

1. For the computer forensics case, identify what evidence the forensics experts were able to gather.
2. What important questions should the security incident response form answer.

3. Why is it important to include a time/date stamp in the security incident response form?

Answer 1

Answer 1
************

a “wealth of information,” including documented proof that drugs were being diverted from purchasers in Europe and Canada, and being sent to the United States only that the drugs were handled by a legitimate drug repackaging and export company only that the distributor was repackaging vitamins in a legitimate fashion that the distributor was diverting drugs from purchasers in Europe and Canada and sending them to the U.S., but that the activities were very limited in scope.

Answer 2
*************

When facing a cyber security incident, an organisation should be able to react in a prompt and appropriate manner. This is why it is important to decide how you will handle certain situations ahead of time instead of when you encounter them for the first time during an incident. Make a plan (on paper, not just in your head) to limit damage, to reduce costs and recovery time and to communicate with both internal and external stakeholders.

Answer 3
************

It is important to document that the evidence was being controlled at all times , A time/date stamp can help investigators determine the time and date that a crime was committed. It is not important to include a time/date stamp.

if you have any doubt then please ask me without any hesitation in the comment section below , if you like my answer then please thumbs up for the answer , before giving thumbs down please discuss the question it may possible that we may understand the question different way and i can edit and change the answers if you argue, thanks :)