Scribd Logo
Upload

Welcome to Scribd!

  • WER Significance

    Uploaded by

    Shourya Gautam
    14 views1 page
    RAID-1 uses disk mirroring for redundancy, requiring a minimum of 2 disks, and providing the best data availability. RAID-10 uses both disk stripping and mirroring, requiring a minimum of 4 disks, and providing the highest data throughput and availability. The table compares these RAID levels and their forensic value by features, disk requirements, best case conditions, and ability to gather evidence. WER records system error data that can be forensically analyzed to determine system state and potential issues. The table outlines the primary uses of Disk Cleanup, BitLocker, Metadata, and InPrivate Browsing and whether they could hide or encrypt relevant evidence or introduce artifacts during a digital forensic investigation on a Windows system.

    Original Description:

    Original Title

    Untitled

    Copyright

    © © All Rights Reserved

    Available Formats

    DOC, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    RAID-1 uses disk mirroring for redundancy, requiring a minimum of 2 disks, and providing the best data availability. RAID-10 uses both disk stripping and mirroring, requiring a minimum of 4 disks, and providing the highest data throughput and availability. The table compares these RAID levels and their forensic value by features, disk requirements, best case conditions, and ability to gather evidence. WER records system error data that can be forensically analyzed to determine system state and potential issues. The table outlines the primary uses of Disk Cleanup, BitLocker, Metadata, and InPrivate Browsing and whether they could hide or encrypt relevant evidence or introduce artifacts during a digital forensic investigation on a Windows system.

    Copyright:

    © All Rights Reserved
    Download as DOC, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    14 views1 page

    WER Significance

    Uploaded by

    Shourya Gautam
    RAID-1 uses disk mirroring for redundancy, requiring a minimum of 2 disks, and providing the best data availability. RAID-10 uses both disk stripping and mirroring, requiring a minimum of 4 disks, and providing the highest data throughput and availability. The table compares these RAID levels and their forensic value by features, disk requirements, best case conditions, and ability to gather evidence. WER records system error data that can be forensically analyzed to determine system state and potential issues. The table outlines the primary uses of Disk Cleanup, BitLocker, Metadata, and InPrivate Browsing and whether they could hide or encrypt relevant evidence or introduce artifacts during a digital forensic investigation on a Windows system.

    Copyright:

    © All Rights Reserved
    Download as DOC, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 1

    1.

    Correlate precisely the three RAID-Concepts handlings of CIA component(s)-wise, and perform (10)
    requisite identifications on RAIDs (1 and 10) from the forensic perspective and tabulate a precise
    comparison on the exclusive ‘feature, minimum disk requirements, best case condition, and forensic
    value’.
    C I A
    Stripping

    Mirroring

    Parity

    RAID-1 RAID-10
    Ex-Feature

    Min-disks
    Best Case
    Condition
    Forensic
    Value
    2. What is WER and its forensic significance? Tabulate the respective primary utility and associated (10)
    forensic value/concern of “Disk Cleanup, BitLocker, InPrivate Browsing, and Metadata” when using a
    Windows system for crucial logical acquisitions.
     WER significance:


    utility forensic value/concern
    Disk
    Cleanup

    BitLocker

    Metadata

    InPrivate
    Browsing

    You might also like