A municipal investigation into stolen case-management data may involve desktops, network captures, and city-issued phones. What approach best reflects sound digital forensics practice?
Select an answer to reveal the explanation.
Short Explanation
Forensics is careful packing, not shaking the gift to see what rattles. Use sound procedures, hash what you collect, and cover hosts, nets, and mobiles the case actually touches. Power-cycling for fun or letting suspects pick their own files is how artifacts vanish.
Full Explanation
Digital forensics in municipal investigations applies validated techniques to preserve and analyze artifacts from computers, networks, and mobile devices while maintaining integrity through hashing, write-blocking where appropriate, and thorough documentation. Poor handling—destructive reboots, unsupervised self-collection, or ignoring electronic evidence—undermines investigative reliability. CISSP-level operations expect technique and documentation rigor commensurate with potential administrative or legal use.