Cybercrime
Respond to the following in a minimum of 175 words:
- What is the process used to preserve the verifiable integrity of digital evidence? How does this process ensure that data is preserved and is not modified? How might an analyst show that the original evidence is unmodified? If you were serving on a jury, what arguments would convince you that evidence is not modified?
Include proper grammar, intext citation, references
Answer preview
Digital evidence refers to information stored in a digital form used in courts during trials. The integrity of digital evidence determines its admissibility in court. During data retrieval, individual custodians take responsibility of the digital evidence. These custodians then record the chain of custody to prove that the evidence remained under known possession. The process of maintaining the integrity of digital evidence involves data imaging. During evidence retrieval, original data information undergoes duplication (Abrams, 2018). Duplication ensures the exemption of the original data during investigations. After imaging, the generation of hash values takes place. The hash values enable analysists to identify any bit of data alteration. An analyst confirms the unmodified state of the evidence by showing unchanged hash values throughout investigations. As a member of the jury, I would need…
(230 words)