SEC 405 Week 7 Discussion 1

SEC 405 Week 7 Discussion 1: "Digital Evidence from Operating System"

1. From the first e-Activity, identify and describe at least two tools that can be used to gather evidence from the operating system. Describe specifics on the level of technical experience required to operate and manage these tools. Cite all your sources.
2. Give an example of how evidence from an operating system could be used in a civil case trial.