With Special Celebrity Guest Host: Pharrell’s Hat

 Sham WOW!  New Snuggie for Dogs!  A new car!  Review for INFS 3120 Final (Legal Disclaimer: Sham Wow, Snuggie, & New Car will not be awarded)

Plead the Fifth! TPS Report FTK is my BFF Check’s in the Mail Is it Ethical?

BC GI PQ N S A KLM H R F D UVWX J O T E Y END Plead the Fifth! TPS Report FTK is my BFF Check’s in the Mail Is it Ethical?

What are laws? Points Ethics are internal to an individual, these are external to an individual

What is Disqualification? Points When an Expert Witness is prevented from testifying for any number of reasons, such as having a conflict of interest with the suspect

What is Cross Examination? Points When an expert witness is asked questions by the attorney who did not retain him/her

What is Conflicting Out? Points An unethical tactic used by opposing attorneys to disqualify an Expert Witness by getting the Expert Witness to discuss a case

What is Voir Dire? Points The process by which Expert Witnesses are deemed as sufficiently qualified to testify

What is Private/Corporate? Points s sent within this type of environment are easiest to trace

What is Spoofing? Points A “bad guy” could use this to change the Return Path of an , thus concealing the ’s actual origin

What is Circular Logging? Points This type of server logging overwrites a log file when it reaches a specific size or at the end of a specific time frame

What is the domain name? Points In an address, this is represented by the information that follows the symbol

What is Points A comprehensive Web site that has options for tracing suspect addresses, including by address, by phone number, and by name

What is an Acquired Image? Points This is the most common evidence type loaded into FTK

What is Time Zone? Points This must be specified when evidence is loaded into an FTK Case

What is an Index Search? Points This type of FTK search is typically faster but is not as thorough as a Live Search

What is a Word List? Points This is generated from Registry Files or from an Acquired Image and used to create a custom password dictionary

What is Password Recovery Toolkit (PRTK)? Points This component of the FTK software suite is used to recover passwords in order to access password-protected and encrypted files

What are Deposition Banks? Points Stores examples of an expert witness’ testimony and may be used by attorneys on either side to discover contrary positions that an expert witness may have made in the past

What is a High-Risk Document? Points These documents can include preliminary copies or preliminary drafts of forensic reports

What is Spoliation? Points Destroying or concealing evidence

What is Discovery? Points Part of the pre-trial litigation process during which each party requests relevant information and documents from the other side

What is an Examination Plan? Points Used to let an expert witness know what questions to expect during testimony – can also be used to help an attorney learn the terms and functions used in computer forensics

What is Direct Examination? Points When an expert witness is asked questions by the attorney who hired him/her

What is a Lay Witness? Points Person who basis testimony on personal observation; not considered to be an expert in any particular field

What is a Deposition? Points This differs from trial testimony because there is no judge or jury present

What is Conflicting Out? Points An attempt by opposing attorneys to prevent you from serving on an important case

What is a Curriculum Vitae (CV)? Points Extensive outline of an expert witness’ professional history, including education, training, work, publications, certifications, and past case involvement

And the winners are: Team Name Number of Points Grand Prize Team: 2 nd Place Team: