Case study: action forensics
action forensics is a digital forensics company specializing in imaging hard drives for windows and linux computers. after the hard drives are imaged, they are returned to a protected storage area and the digital images are stored on an internal 50 terabyte san (storage area network) for forensic analysis.
the san is backed up in real time through a dedicated and encrypted point-to-point link to an external storage facility.
there are two separate networks in the action forensics facility. one network connects the san to the eight forensic workstations (computers) used by the forensic investigators. this network is isolated from the internet.
the second network resides behind a firewall and connects to the internet. it provides e-mail and other internet services to the computers used by the president, secretary, and network technician. both networks have their own network printers for printing documents.
all computers and hardware are powered through individual ups devices.
a cleaning staff from a local company comes in every evening to clean. all cleaning employees are bonded.
the company has the following employees:
• there are eight trained forensic investigators who utilize forensic software to analyze the digital images on the san. these same investigators perform all hard drive imaging.
• there is an evidence custodian who manages all evidence brought into action forensics’ protected storage area, and maintains all chain-of-custody records for each evidence item.
• there is a company president, who is responsible for acquiring business contacts and finding forensic work for the investigators.
• there is a company secretary who handles all correspondence and phone calls.
• there is a network technician who is responsible for maintaining the network, all computers, and the required software installations, patches, security updates, firewall configuration, and other network-related activities.
• the company maintains a long-term consulting contract with a law firm to advise on legal issues.
action forensics performs forensic work for law enforcement, businesses, attorneys, schools and universities.
based on the information provided here, do all of the following:
• identify the assets associated with action forensics. explain your reasoning for identifying each asset.
• identify events that may be associated with the assets and your reasoning for the same.
• identify possible outcomes for each event and your reasoning to support each.