{"id":342,"date":"2025-04-23T00:01:10","date_gmt":"2025-04-23T00:01:10","guid":{"rendered":"https:\/\/sites.wp.odu.edu\/aurorafrancis\/?p=342"},"modified":"2025-04-23T00:08:21","modified_gmt":"2025-04-23T00:08:21","slug":"midterm-paper","status":"publish","type":"post","link":"https:\/\/sites.wp.odu.edu\/aurorafrancis\/2025\/04\/23\/midterm-paper\/","title":{"rendered":"Midterm Paper"},"content":{"rendered":"\n

Summary<\/strong><\/p>\n\n\n\n


This digital forensics company would function out of the city of Virginia Beach and will
only handle cases in the local Hampton area including Norfolk, Chesapeake, Portsmouth,
Newport News, Hampton, and, of course, Virginia Beach. Because it is only focused on this
specific area, it is a smaller office located in the back area in the main Virginia Beach police
department. So it is easier to get the product and devices back to the analyzers.<\/p>\n\n\n\n


Accreditation Plan<\/strong><\/p>\n\n\n\n


When trying to obtain accreditation for a digital forensic lab, you need to know the
companies that do the accreditation. This includes ANSI (American National Standards Institute)
and ASQ (American Society for Quality), which do accreditations around the world. The joint
company is called (ANAB) or ANSI-ASQ National Accreditation Board. In order to get
accredited the lab needs to have its tasks and procedures for its cases lined out and properly
practiced for every case. This is because that is one thing the companies look for.
Accreditation teams will also be looking for the following:
\u25cf Ability to properly perform work and training and activities including:
\u25cb Forensic sciences
\u25cb Criminal & civil laws
\u25cb Skills and knowledge in specific tasks and department
\u25cf Code of Ethics and an annual review of it
\u25cf A director or leader with clearly defined rules and responsibilities (Effective
management)<\/p>\n\n\n\n

\u25cf Proper equipment (hardware and software)
\u25cf Other specified requirements
So, in order to obtain and maintain accreditation I will ensure those standards are upheld (ANAB
& AR 3125).<\/p>\n\n\n\n


Forensic Laboratory Floor Plan<\/strong><\/p>\n\n\n\n


Within this lab layout there are at least two computers for forensic analysis and two
office computer areas for the offices of the same forensic analysts or other staff members. The
forensic analysis rooms, lab, and storage rooms require special key cards which would be
included in your employee badge depending on your role. There is also a separate office for the lab director or manager. As far as physical security is concerned, locked rooms are one type of
security. When it comes to the devices, including backups, privacy screens, labeled equipment, and protecting both the evidence and any data is an expectation within the company. This also
includes logs of who enters and exits rooms and floor to ceiling walls and doors to ensure
security (Nelson 2018).<\/p>\n\n\n\n

Inventory (Awesome Forensics\/Github)<\/strong><\/p>\n\n\n\n

Hardware<\/p>\n\n\n\n

\u25cf Write blockers \u25cf Disk imager \u25cf TD4 Duplicator \u25cf Books on digital forensics \u25cf Book shelves
\u25cf Forensics Computers (2 or more) \u25cf Desktop computers (2 or more) \u25cf Desks and chairs (At least 5)
\u25cf Power cords \u25cf Standing lamps \u25cf Door locks \u25cf Printer and accessories \u25cf Paper \u25cf Pens and pencils<\/p>\n\n\n\n

Software<\/p>\n\n\n\n

\u25cf Autopsy \u25cf The Sleuth Kit \u25cf FTK Imager \u25cf EnCase \u25cf Linux \u25cf Forensic Artifacts
\u25cf Bulk_extractor: Extracts info like emails and card info from disk images
\u25cf WireShark: Protocol analyzer \u25cf Docker Explorer \u25cf Hindsight: Forensics for Chrome
\u25cf Timeline Explorer: Timeline analysis \u25cf RAM Acquisition<\/p>\n\n\n\n

Maintenance<\/strong>
Lab Management Guidelines<\/p>\n\n\n\n


In order to maintain the standards and policies of the lab, random audits will be
conducted to ensure that everything is running smoothly. This includes:
\u25cf Ensuring the right people have access to specific areas
\u25cf Reviewing visitation logs
\u25cf Ensuring no areas are damaged or need repairs
\u25cf Every device is up to date
\u25cf Evidence is properly stored away<\/p>\n\n\n\n


Preventative Maintenance<\/strong><\/p>\n\n\n\n


The goal for maintaining the lab is to keep the safety of all individuals in mind. This
includes keeping the lab environment clean and well kept in every aspect. Any issues causing
damage to the structure or lab will be reported to maintenance and repaired as soon as possible to
prevent any injury. Because this lab is focused on computers and electrical devices, there will be plenty of protection around the entire lab to help prevent any issues. For disposing of any electrical equipment, we will partner with an electronic company and donate any available parts to them once they are no longer needed.<\/p>\n\n\n\n


Budgets<\/strong><\/p>\n\n\n\n


The budget of this department will be handled by the government and police department that this forensics company works under. (Case prices can be between $5,000 – $15,000 on average, but can cost up to $100,000) Any cases with a cost estimated over $20,000 will be automatically sent to the state or district office (Nelson 2018).<\/p>\n\n\n\n

Roles\/ Responsibilities (Nelson 2018)<\/strong><\/p>\n\n\n\n


\u2756 Lab Director\/Manager
\u27a2 Details how to manage cases (logging evidence how to file reports, and who is
working on cases)
\u27a2 Reviews casework and files
\u27a2 Creates and enforces company ethical standards and company policies
\u27a2 Schedules updates for labs (hardware and software)
\u27a2 Manages money spent on casework<\/p>\n\n\n\n


\u2756 Forensic Analyst & Staff Members
\u27a2 Receiving products and devices that need to be restored, analyzed, and stored.
\u27a2 Running tests on the devices (like imaging)
\u27a2 Technical training (Especially when new methods come out)
\u27a2 Lab procedures<\/p>\n\n\n\n


\u2756 Forensic Investigator
\u27a2 Acquiring items that contain data (i.e. USB or hard disk)
\u27a2 Preserving evidence and making copies of it
\u27a2 Filing a detailed report on evidence (what it is, where it was found, etc)<\/p>\n\n\n\n

Sources<\/strong><\/p>\n\n\n\n


AR 3125 ISO\/IEC 17025:2017, anab.qualtraxcloud.com\/ShowDocument.aspx?ID=12371
Cugu. \u201cCugu\/Awesome-Forensics: A Curated List of Awesome Forensic Analysis Tools and Resources.\u201d
GitHub, github.com\/cugu\/awesome-forensics
\u201cHttps:\/\/Anab.Qualtraxcloud.Com\/ShowDocument.Aspx?I\u2026\u201d ANAB ANSI National Accreditation
Board, anab.qualtraxcloud.com\/ShowDocument.aspx?ID=7183
Nelson, Bill, et al. Guide to Computer Forensics and Investigations: Processing Digital Evidence. 6th ed.,
CENGAGE LEARNING, 2018. <\/p>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Summary This digital forensics company would function out of the city of Virginia Beach and willonly handle cases in the local Hampton area including Norfolk, Chesapeake, Portsmouth,Newport News, Hampton, and, of course, Virginia Beach. Because it is only focused on thisspecific area, it is a smaller office located in the back area in the main… <\/p>\n

Read More<\/a><\/div>\n","protected":false},"author":27605,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wds_primary_category":12},"categories":[12],"tags":[],"_links":{"self":[{"href":"https:\/\/sites.wp.odu.edu\/aurorafrancis\/wp-json\/wp\/v2\/posts\/342"}],"collection":[{"href":"https:\/\/sites.wp.odu.edu\/aurorafrancis\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sites.wp.odu.edu\/aurorafrancis\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/aurorafrancis\/wp-json\/wp\/v2\/users\/27605"}],"replies":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/aurorafrancis\/wp-json\/wp\/v2\/comments?post=342"}],"version-history":[{"count":3,"href":"https:\/\/sites.wp.odu.edu\/aurorafrancis\/wp-json\/wp\/v2\/posts\/342\/revisions"}],"predecessor-version":[{"id":347,"href":"https:\/\/sites.wp.odu.edu\/aurorafrancis\/wp-json\/wp\/v2\/posts\/342\/revisions\/347"}],"wp:attachment":[{"href":"https:\/\/sites.wp.odu.edu\/aurorafrancis\/wp-json\/wp\/v2\/media?parent=342"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/aurorafrancis\/wp-json\/wp\/v2\/categories?post=342"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/aurorafrancis\/wp-json\/wp\/v2\/tags?post=342"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}