An insurance company has asked your digital forensics firm to review a case for an arson investigation. The suspected arsonist has already been arrested, but the insurance company wants to determine whether there's any contributory negligence on the part of the victims. Two files were extracted to your work folder for this project: 1. The first, Letter 1.doc, is a memo about the case from the police department. 2. The second, Letter 2.doc, is a letter from the insurance company explaining what should be investigated.

A well-structured report (word document) which must include: Total word count 200 Review these files, and decide the course of action your firm needs to take include how your firm should approach the case: Identify with full explanation and justification which digital investigation category this case falls into public-sector or private-sector investigations explain the following: 1- Legal Processes (1 point) 2- Planning the investigation (1.5 point) 3- Evidence custody form (1.5 point) 4- Securing the evidence (1 point)

1ST LETTER:The Seattle Police Department is contacting you to request the assessment of computer evidence. On June 6 th , 2004, the Seattle Police Department conducted a raid of the home of Patrick R. Kasey. Mr. Kasey is suspected of starting several local fires and is wanted for questioning by several other police departments in connection with arson events in their precincts. Mr. Kasey was taken into custody during the raid and is maintaining his innocence. Although some physical evidence was captured, the District Attorney does not feel that the evidence is strong enough to bring charges. Mr. Kasey is not providing any additional information on the advice of his attorney. During the raid, a Gateway desktop computer was seized. The computer was running at the time of the raid, and we believe that Mr. Kasey was using the computer at that time. Please examine the provided forensic image of Mr. Kasey's hard drive for evidence that could link him to acts of arson. Sincerely, John Holmes, Detective, Seattle Police Department

2nd letter:Dear Forensic Investigator; Recently there has been a string of arsons in the greater metro area. One of our clients has filed a claim of over $2 million. Before paying the claim, we would like to establish that the client was not complicit in any way with the arsonist. Attached is the police report regarding the suspect and the computer evidence seized. Please obtain copies of the evidence and evaluate them to determine if our clients are involved in the arsons. If you need any further information please contact our lead on this case, Jason Sorenson, 360.555.2314. Regards, Legatima Claims department