Legal
Tools
Technology
Acronyms
MISC
100

This amendment support the right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures

4th Amendment

100

This device is used to ensure continuity of power during potential outages

UPS

100

This process is used in SSDs to extend their lifespan in regard to storage usage

Wear Leveling

100

This is the full version for the acronym BIOS

Basic Input Output System

100

This is the conversion of the binary number 1111 to decimal

15

200

This involves hiding, altering, or destroying evidence related to an investigation

Spoliation

200

This tool is a desktop application that an be used to quickly hash a file using multiple algorithms

HashCalc

200

This technology is used for connecting external drives, and is a form of SATA

eSATA

200

This is the full version for the acronym UEFI

Unified Extensible Firmware Interface

200

This is the conversion of the binary number 1101011 to decimal

107

300

What is a unit within the FBI that is responsible for providing support for investigations that require skilled computer forensics examinations

Computer Analysis Response Team

300

This application is robust, and you may bookmark evidence which helps create reports

EnCase

300

This file system has a file size limit of 4GB

FAT32

300

This is the full version for the acronym SSD

Solid State Drive

300

When copying one drive to another, this drive is the drive being copied to

Harvest Drive

400

This is an important crime database utilized by law enforcement nationwide to apprehend fugitives, recover stolen goods, identify terrorists, and locate missing persons

National Crime Information Center (NCIC)

400

This product is used to image Apple computers, iPhone's and iPads

Blacklight

400

This file system is the most commonly used in Microsoft Windows today

NTFS

400

This is the full version for the acronym RAID

Redundant Array of Independent Disks
400

When you acquire a hard disk with the intent to create a file containing the entirety of the information you create this

Disk image

500

This individual testifies about personal experience and knowledge and may not express an opinion

Lay witness

500

This technology can be used to encrypt USB drives

Bitlocker 2 Go

500

This is used to extract data from a disk drive or other storage device without the assistance of the file system that originality created the file

File Carving

500

This is the full version for the acronym SWGDE

Scientific Work Group on Digital Forensics

500

When working with USB forensics, this is where you will find most of the evidence

Registry

M
e
n
u