Written 8

1. In which devices can electronic evidence be found?
2. List five types of files that may be created by the computer user.

 3. What are metadata? Why is this type of data important?
4. What are event logs? Why are they important?
5. What are volatile data?
6. What is encryption?
7. What is steganography?
8. Name five types of files that are created by the computer.
9. What is imaging? 

10. What is a write blocker?
11. How can an investigator validate that he or she made an exact copy of a 

hard drive?
12. Which computer forensics tools are widely used in the United States? 

3 pages