TDS is a national delivery company based at Thornton Science Park. They employ $50$ staff including administration, vehicle drivers, and warehouse workers. Their system is reliant on IT systems. Their Business Systems comprise of financial software for tracking and accounting and asset marking software for tracking parcels through distribution channels. They have the following computers in use across the business: Servers $-1$x Windows Server $2022$ running the following roles: Active Directory Domain Services, DNS$,$ DHCP$,$ File Server $-1$x Debian $11($Bookworm$)$ for backup of files from the Windows Server Clients $($Desktop$/$Laptops$)20$x computers which are used primarily by the administration staff, who underpin the day$-$to$-$day operations of the company. $-3$x Windows $7-15$x Windows $10-2$x macOS Ventura Your job, as a Digital Forensics Officer is to perform the following tasks. Data capture and analysis Change focus from log management to a wider auditing and data collection perspective. You are to discuss practically and in detail the tools and techniques used to capture$/$extract and then analyse the data for analysis. Consider the following aspects from a hardware and software perspective how you would audit, extract, and examine data from: $-$ Network $($Wi$-$Fi and Ethernet$)-$ Storage mediums $($SSD$/$HDD drives, USBs, etc$)-$ Memory $($RAM$)$ Discuss the implications of live capture $($powered on$)$ vs offline capture $($powered off$).$ The hardware$/$software that use should be able to run on the environment above. You should be using different software options for these and giving your verdict on the pros and cons of each. For example, what software could you use to capture images of the hard disk on all operating systems in the case study? What could you then use to analyse the disk image? $($This is the same then for capturing and auditing the RAM capture$).$ For the network, how would you capture network traffic? Where would be the best place to capture it$?$ On the network router? The PCs themselves? Give details on how you will ensure best practise for capture and audit of the data so that it will hold up in a court of law. Eg$.$ Using write blockers, photographs of the scene, etc.