In this lesson, you explored proper forensic procedures, appropriate evidence handling procedures, evidence transfer, types of computer media from which evidence is commonly gathered, and the basics of imaging techniques.

In this lab, you will gain experience creating a forensic system case file in Paraben P2 Commander. Its feature set includes tools for analyzing documents, email, chat, system files, and more. You will first use P2 Commander to investigate an image of a hard drive to find forensic evidence. Then you will create an electronic case file for the evidence. In this way, you will experience the steps for a forensic investigation that ensure evidence is defensible and presentable in a court of law.

Please answer this

1. What is the main purpose of a forensic analysis?

2. What is the purpose of Parabens P2 Commander?

3. Describe how P2 Commander helps protect the chain of custody process?

4. Explain why it is a good idea to make an image or copy of the targeted image when conducting a forensic case analysis?

5. Describe in your own words why it is so important to properly document and create cases to house all the relevant forensic information pertaining to an investigation?