Computer Forensics

1. What is the investigators three main roles in handling evidence?
2. What are examples of volatile data?
3. Will volatile memory persist without system power?
4. Share information from your own experience with volatile memory.
5. What is temporary data?
6. What is the purpose of documenting filenames, dates, and times?
7. What are some dos and donts when gathering evidence?
8. What are the differences among live analysis, physical analysis, and logical analysis?