Question 1: Read the online available scholar paper “The Impact of Full Disk Encryption on Digital Forensics” by Eoghan Casey, and Gerasimos J. Stellatos, ACM SIGOPS Operating Systems, vol. 42 (3), 2008. The paper explores practical ways of handling encrypted disk issue from a forensics point of view. List what you have learned after reading this paper. Imagine you were a forensics examiner, how would this paper help you conduct forensics investigation of encrypted disks? Please explain.
Question 2: Make a research on hardware forensics tools. Select two current tools and explain how they could help in forensics investigations. Please cite your resources
#Imagine #forensics #examiner #paper
