CompTIA Advanced Security Practitioner (CASP+) CAS-004 Cert Guide

Chapter 16

Forensic Concepts

This chapter covers the following topics:

• Legal vs. Internal Corporate Purposes: This section covers balancing legal requirements and corporate goals and purposes.

• Forensic Process: This section covers the steps in the forensic process: identification, evidence collection (including issues related to chain of custody and order of volatility), cloning, evidence preservation, analysis, verification, and presentation.

• Integrity Preservation: This section covers activities such as hashing to ensure evidence integrity.

• Cryptanalysis: This section covers processes used to attack an algorithm or its implementation.

• Steganalysis: This section describes steganalysis, which is a method of hiding data in a graphic.

This chapter ...