Computer Science Homework Help

How you would conduct the  investigative preview, and what you would hope to gather from the preview. Include a brief  summary from the case. Your paper needs to explain the preview process in some detail and  shouldn’t only be a reiteration of the case. You’re preview should answer who, what, when,  where, why, and how. The last one, “how” is vitally important and should explain your  recommended procedures in detail. Your report should also outline what you would do if  evidence was found that supported the allegations against the suspect. You also need to discuss  what to do if no evidence is found that supports the allegation.

Case Additional Details:

• Zane Wilkens teaches history at Fuller Middle School in West Des Moines, IA.The Principal is Samuel Brady.There is one IT person (Allen Jones) between the different schools in the district.
• Zane also coaches girls’ soccer and runs their practice after school for an hour. 
• There is one IT person (Allen Jones) who takes care of the different schools in the district. The servers are located in the school district headquarters building.
• In addition to his school email account, he also has a Hotmail account that he accesses from his classroom computer.From his IE7 browser history, you can also tell he uses Facebook, Craigslist, and Dropbox.
• Equipment found in the classroom includes: 
  • PC – IBM Lenovo 8808 Pentium D 3.4GHz 80Gb XP Desktop Computer with 1Gb of RAM and 4 USB ports and a 10/100Mb network card. 
  • Camera – Camom PowerShoot A1300 16MP Digital Camera with a 16GB SDHC card, of which 10Gb is used. 
  • USB Memory Stick – 8GB SanDisk Pro Duo, of which 6GB is used. 
• In reviewing the PC’s hard drive, you notice that you can only “see” 60GB and you suspect that it may contain a hidden drive/partition since it has TrueCrypt installed.
• The post-it notes on his monitor contain the following: 
  • Cindy: 555-2367 & Joann 555-8265 o HM: Porsche06, CL: Ferrari08, FB: Camaro04, TC: Mustang02 

After researching a bit more, there are some notes from a video:

– possible child pornography offender

-rumor of molesting students and taking pictures of them, then -looking at pics on classroom computer

-onsite investigation in cases such as these

Suggest to conduct an on-site preview. An on-site preview occurs when law enforcement investigators view information on a computer on-site without actually removing the device from the premises. With software and other materials, the investigator is able to look at the data stored on a computer without altering any potential evidence. Do we need formal written consent from the school district to conduct an on-site preview on Zane’s work computer? You must obtain written consent before conducting the on site preview. Verbal consent is not good enough.

Since the middle school principle and district superintendent have given written consent to conduct a preview of Zane’s work computer, need to gather some supplies. It’s important to find out if there is a basis for the rumors before we can charge Zane with anything. a checklist of the items we’ll need:

-write block

-laptap

-forensic software

-forensic boot cd such as Helix or BackTrack

When we go on-site to preview Zane’s computer, we need to be sure to use the correct procedure, so we don’t alter evidence. Using a forensic boot CD or a write block, laptop and forensic software trio, we can access the computer’s hard drive without altering it. While on site, what other evidence could help sustain or disprove the allegations? Some pieces of evidence include: camera, e-mail on network server; and items found in his work area such as USB drives, notes, photos, and documents. will need to write a report that outlines what you would do if we found evidence that supported the allegations against Zane. I will also ask you to discuss what to do if no evidence is found. Please keep this in mind.

So, what are some of the advantages of conducting an on-site preview versus seizing computer media?

-You can confirm evidence that does exist or does not exist

-Allows you to collect evidence without suspect knowing

-Eliminates unnecessary humiliation of the suspect

-Saves the seizure of non-evidence computers

If after conducting the on-site preview you find evidence that supports the allegations, it’s preferable to obtain a search warrant before leaving the site.

When Zane was hired he signed an acceptable use policy. By signing this document Zane relinquished all rights to privacy on the school owned computer and network. Click her to view an acceptable use policy.