What is the first step taken in an investigation for laboratory forensic staff members?

What encryption technology is used on Blackberry devices Password Keeper?

An employee is suspected of stealing proprietary information belonging to your company that he had no rights to possess. The information was stored on the employee computer that was protected with the NTFS Encrypted File System (EFS) and you had observed him copy the files to a floppy disk just before leaving work for the weekend. You detain the employee before he leaves the building and recover the floppy disk and secure his computer.

Will you be able to break the encryption so that you can verify that the employee was in possession of the proprietary information?

Which program is the boot loader when Windows XP starts up?

Sectors in hard disks typically contain how many bytes?

All Blackberry email is eventually sent and received through what proprietary RIM-operated mechanism?

What type of attack occurs when an attacker can force a router to stop forwarding packets by flooding the router with many open connections simultaneously so that all the hosts behind the router are effectively disabled?

When using Windows acquisitions tools to acquire digital evidence, it is important to use a well- tested hardware write-blocking device to _________

Where are files temporarily written in Unix when printing?

You are working as a computer forensics investigator for a corporation on a computer abuse case. You discover evidence that shows the subject of your investigation is also embezzling money from the company. The company CEO and the corporate legal counsel advise you to contact local law enforcement and provide them with the evidence that you have found. The law enforcement officer that responds requests that you put a network sniffer on your network and monitor all traffic to the subject computer.

You inform the officer that you will not be able to comply with that request because doing so would: