You are a civilian analyst working with the local police department. You receive report of an arson to a local business. A DVR and the business computer was recovered from the fire. The owner has criminal history consisting of multiple frauds, negotiating a worthless instrument (bounce checks), and theft.

How would you respond?

Where would you respond? Business? Home? Where would you look for computer evidence? What items would you take? DVDs, thumb drives, fax machine, Ipads, phones, etc

What about the children in the home? Would you do anything different?

Search Warrant? Consent?

How would you secure the scene at the residence? At the business site?

For this particular crime, what forensic evidence would you be looking for?

You respond and notice that both the desktop and laptop are on? What do you do?

You notice a multiple cell phones and SIM cards on the table? What do you do? What information can you get off a SIM card?

Once you get the evidence, how would you package it up for transport back to your lab?