With Special

Celebrity Guest Host:

Pharrell’s Hat

Sham WOW!

New Snuggie for Dogs!

A new car!

Review for INFS 3120 Final

(Legal Disclaimer: Sham Wow, Snuggie, & New Car will not be awarded)

Pleadthe Fifth!

TPSReport

FTK is my BFF

Check’s in the Mail

Is itEthical?

B C

G I

P Q

N

S

A

K L M

H

R

F

D

U V W X

J

O

T

E

Y

END

Pleadthe Fifth!

TPSReport

FTK is my BFF

Check’s in the Mail

Is itEthical?

200 200 200 200 200

400 400 400 400 400

600 600 600 600 600

800 800 800 800 800

1000 1000 1000 1000 1000

What are laws? - 200 Points

Ethics are internal to an

individual, these are external to

an individual

What is Disqualification? - 400 Points

When an Expert Witness is

prevented from testifying for

any number of reasons, such as

having a conflict of interest with

the suspect

What is Cross Examination? - 600 Points

When an expert witness is

asked questions by the attorney

who did not

retain him/her

What is Conflicting Out? - 800 Points

An unethical tactic used by

opposing attorneys to disqualify

an Expert Witness by getting

the Expert Witness to discuss a

case

What is Voir Dire? - 1000 Points

The process by which Expert

Witnesses are deemed as

sufficiently qualified to testify

What is Private/Corporate? - 200 Points

Emails sent within this type of

environment are

easiest to trace

What is Spoofing? - 400 Points

A “bad guy” could use this to

change the Return Path of an

email, thus concealing the

email’s actual origin

What is Circular Logging? - 600 Points

This type of email server

logging overwrites a log file

when it reaches a specific size

or at the end of a specific time

frame

What is the domain name? - 800 Points

In an email address, this is

represented by the information that

follows the “@” symbol

What is www.freeality.com? - 1000 Points

A comprehensive Web site that has

options for tracing suspect email

addresses, including by

e-mail address, by phone number,

and by name

What is an Acquired Image? - 200 Points

This is the most common

evidence type loaded into FTK

What is Time Zone? - 400 Points

This must be specified when evidence

is loaded into an

FTK Case

What is an Index Search? - 600 Points

This type of FTK search is

typically faster but is not as

thorough as a Live Search

What is a Word List? - 800 Points

This is generated from Registry

Files or from an Acquired Image

and used to create a custom

password dictionary

What is Password Recovery Toolkit (PRTK)? - 1000 Points

This component of the FTK

software suite is used to recover

passwords in order to access

password-protected and

encrypted files

What are Deposition Banks? - 200 Points

Stores examples of an expert witness’

testimony and may be used by

attorneys on either side to discover

contrary positions that an expert

witness may have made in the past

What is a High-Risk Document? - 400 Points

These documents can include

preliminary copies or

preliminary drafts of forensic

reports

What is Spoliation? - 600 Points

Destroying or concealing

evidence

What is Discovery? - 800 Points

Part of the pre-trial litigation

process during which each party

requests relevant information

and documents from the other

side

What is an Examination Plan? - 1000 Points

Used to let an expert witness know

what questions to expect during

testimony – can also be used to help

an attorney learn the terms and

functions used in computer forensics

What is Direct Examination? - 200 Points

When an expert witness is

asked questions by the attorney

who hired him/her

What is a Lay Witness? - 400 Points

Person who basis testimony on

personal observation; not

considered to be an expert in

any particular field

What is a Deposition? - 600 Points

This differs from trial testimony

because there is no judge or

jury present

What is Conflicting Out? - 800 Points

An attempt by opposing

attorneys to prevent you from

serving on an important case

What is a Curriculum Vitae (CV)? - 1000 Points

Extensive outline of an expert witness’

professional history, including

education, training, work, publications,

certifications, and past case

involvement

And the winners are:

Team Name

Number of Points

Grand Prize Team:

2nd Place Team: