cisco certification in south africa

cisco certification in south africa.When collecting evidence, it is important to protect its integrity. That is, make sure that nothing has been added to the evidence either ,3.9 Taking Evidence 171nor has anything been removed or destroyed (this is also called evidence preservation).Tip: A common means of preserving evidence is to use only copies of the evidence in general, that is, not to use the evidence directly in its "real" form. This usually involves mirroring the hard drive or storage device.There are several forensic tools available on the market, two of the more popular ones are shown below.EnCaseo from Guidance SoftwareForensic Toolkito by AccessData Another approach to evidence preservation is to implement write protection for storage devices. That is, before mirroring the storage device under investigation, immediately implement write protection and label it with a label that contains the following. The name of the investigator. The date the image was created. The name and number of the case (if applicable). It is also necessary to prevent electronic static or other discharges from damaging or erasing the data used as evidence. Special anti-static evidence bags should be used to store digital equipment. It is important to prevent electrostatic discharge (ESD) and other discharges from damaging evidence. Some units have even set up cyber forensics labs to which only authorized users and investigators have access. Constructing a so-called "Faradaycage" is also a common method of preventing ESD and other discharges. Such a "cage" is usually made of a mesh of conductive material that prevents electromagnetic energy from entering or leaving the cage. Faraday cages can also prevent devices from communicating via WiFi or cellular signals. When transporting evidence to a cyber forensics lab or any other location, including a court of law, be sure to use care and caution, whichOne point is very important. The maintenance of the chain of custody is also critical during the transfer process. When transferring evidence, it should be secured in a locked container to the extent possible. In addition, it is recommended that a person be present throughout the transfer of evidence.3.9.2 Reverse engineeringIshmael reverse engineering is the method of obtaining architectural information, which can be any information originally created by another person.