UNIT – 4 Understanding Computer Forensics

1. Define computer Forensics

2. Differentiate between Computer Forensics and Digital Forensics
3. Differentiate between forensics policy and security policy
4. Why we need computer forensics, justify it briefly
5. Which are two domains of cyber forensics and explain each of them?
6. List out different files resides in computer system
7. What are guidelines involved in digital evidence collection phase
8. What are the rules of evidence and explain?
9. Mention and explain context involved in digital evidence
10. Explain components of emails system in detail
11. What is the process model of seizure and handling of forensics evidence legal
framework?
12. Explain in detail about each phase in computer forensics/ digital forensics
13. What is forensics process. Explain it
14. How to maintain integrity of digital evidence, specify and explain each principle?
15. Explain two chains of custody and Network Forensics