Title: Module 5 Objectives and Activities List
Course: IN 2005 Digital Forensics > Section: Module 5: Chapter 5 - Processing Crime and Incident Scenes

Learning Objectives

By successfully completing this module, the student will be able to:

- Explain the rules for digital evidence
- Describe how to collect evidence at private-sector incident scenes
- Explain guidelines for processing law enforcement crime scenes
- List the steps in preparing for an evidence search
- Describe how to secure a computer incident or crime scene
- Explain guidelines for seizing digital evidence at the scene
- List procedures for storing digital evidence
- Explain how to obtain a digital hash
- Review a case to identify requirements and plan your investigation

Learning Activities

- Read Chapter 5
- Read Instructor notes

In this chapter, you learn how to process a computer investigation scene.  Evidence rules are critical, whether you’re on a corporate or a criminal case.  As you’ll see, a civil case can quickly become a criminal case and a criminal case can revert to a civil case.  This chapter examines rules of evidence in the United States, but the procedures apply in most courts worldwide.  Chapter 5 also describes differences between a business (private entity) and a law enforcement organization (public entity) in needs and concerns, and discusses incident-scene processing for both types of investigations.  Finally, Chapter 5 explains how to apply standard crime scene practices and rules of evidence to corporate and law enforcement computing investigations.

Assessment Activities

- Complete Discussion 5
- Complete Quiz 5
- Complete Chapter 5: Hands on Projects 5-4 & 5-5