What items are needed when gathering the resources you identified in your investigation plan?
What will be an ideal response?
ANSWER: You need the following items:
* Original storage media
* Evidence custody form
* Evidence container for the storage media, such as an evidence bag
* Bit-stream imaging tool; in this case, the ProDiscover Basic acquisition utility
* Forensic workstation to copy and examine your evidence
* Securable evidence locker, cabinet, or safe
Computer Science & Information Technology