Question

A murder in a downtown office building has been widely publicized. You’re a police detective and receive a phone call from a computer forensics investigator, Gary Owens, who says he has information that might relate to the murder case. Gary says he ran across a few files while investigating a policy violation at a company in the same office building.

Answer 1

Acquired evidence through live acquisition

Done by use of FTK imager

Tools used in computers forensics have automated function of hashing.

Figure out evidence

accounting and internet history

Normalize documents