WK8-476

You have finished your investigation at the Triton Corporation involving the employee with the USB device and the cell phone that was allegedly looking at child pornography. You found 112 images of child pornography on the USB device. You found text messages that had embedded images of child pornography and numerous images and videos of child pornography on the cell phone.

You have provided your final report to the prosecutor; however, due to the technical nature of your work, the prosecutor is unfamiliar with what questions he should ask you on the stand.

Prepare a 2-3 page paper that educates the prosecutor on the following:

• What is computer forensics?
• How do we know that the original evidence was not changed during the forensic process?
• How did we find the evidence on the USB device and on the mobile phone?
• Definitions for any technical terms used in your paper.

Please compose your paper in APA style format and include 2-3 cited sources of information.