Illustrate the meanings of these words in your own sentences.

Make up the lists of their synonyms and antonyms.

4. Rewrite the list of general considerations that may assist the examiner throughout the documentation process using sentences with modal verbs instead of imperative mood and write it in the form of a business letter to the branches according to the recommendations given below:

 

TEXT 4

 

Read the text and remember the format of the document.

EXAMINER'S REPORT

 

This section provides guidance in preparing the report that will be submitted to the inves­tigator, prosecutor, and others. These are general suggestions; departmental policy may dictate report writing specifics, such as its order and contents. The report may include:

1. Identity of the reporting agency.

2. Case identifier or submission number.

3. Case investigator.

4. Identity of the submitter.

5. Date of receipt.

6. Date of report.

7. Descriptive list of items submitted for examination, including serial number, make, and model.

8. Identity and signature of the examiner.

9. Brief description of steps taken during examination, such as string searches, graphics image searches, and recovering erased files.

10. Results/conclusions.

 

The following sections have been found to be useful in other report formats.

Summary of findings

This section may consist of a brief summary of the results of the examinations per­formed on the items submitted for analysis. All findings listed in the summary should also be contained in the details of findings section of the report.

Details of findings

This section should describe in greater detail the results of the examinations and may include:

1. Specific files related to the request.

2. Other files, including deleted files, that support the findings.

3. String searches, keyword searches, and text string searches.

4. Internet-related evidence, such as Web site traffic analysis, chat logs, cache files, e-mail, and news group activity.

5. Graphic image analysis.

6. Indicators of ownership, which could include program registration data.

7. Data analysis.

8. Description of relevant programs on the examined items.

9. Techniques used to hide or mask data, such as encryption, steganography, hidden attrib­utes, hidden partitions, and file name anomalies.

Supporting materials

List supporting materials that are included with the report, such as printouts of particu­lar items of evidence, digital copies of evidence, and chain of custody documentation.

 

Glossary

A glossary may be included with the report to assist the reader in understanding any tech­nical terms used. Use a generally accepted source for the definition of the terms and include appropriate references.

TEXT 5

 

 

Analyze the case using the above information:

 

 

CASE BRIEF 1 REPORT

 

 

MEMORANDUM

 

 

FOR: County Sheriff's Police Investigator Johnson Anytown, USA 01234

SUBJECT: Forensic Media Analysis Report SUBJECT: DOE, JOHN Case Number: 012345

1. Status: Closed.

2.Summary of Findings:

■ 327 files containing images of what appeared to be children depicted in a sexually explicit manner were recovered.

^■ 34 shortcut files that pointed to files on floppy disks with sexually explicit file names involving children were recovered.

3.Items Analyzed:

 

T AG NUMBER:ITEM DESCRIPTION:

012345 One Generic laptop, Serial # 123456789

 

4.Details of Findings:

^■ Findings in this paragraph related to the Generic Hard Drive, Model ABCDE, Serial # 3456ABCD, recovered from Tag Number 012345, One Generic laptop, Serial # 123456789.

 

1) The examined hard drive was found to contain a Microsoft® Windows® 98 operat­ing system.

2) The directory and file listing for the media was saved to the Microsoft® Access Database TAG012345.MDB.

3) The directory C:\JOHN DOE\PERSONAL\FAV PICS\, was found to contain 327 files containing images of what appeared to be children depicted in a sexually explicit manner. The file directory for 327 files disclosed that the files' creation date and times are 5 July 2001 between 11:33 p.m. and 11:45 p.m., and the last access date for 326 files listed is 27 December 2001. In addition, the file directory information for one file disclosed the last access date as 6 January 2002.

4) The directory C:\JOHN DOE\PERSONAL\FAV PICS TO DISK\ contained 34 shortcut files that pointed to files on floppy disks with sexually explicit file names involving children. The file directory information for the 34 shortcut files disclosed the files' creation date and times are 5 July 2001 between 11:23 p.m. and 11:57 p.m., and the last access date for the 34 shortcut files was listed as 5 July 2001.

5) The directory C:\JOHN DOE\LEGAL\ contained five Microsoft®Word documents related to various contract relationships John Doe Roofing had with other entities.

6) The directory C:\JOHN DOE\JOHN DOE ROOFING\ contained files related to operation of John Doe Roofing.

7) No further user-created files were present on the media.

5. Glossary: Shortcut File: A file created that links to another file.

6. Items Provided: In addition to this hard copy report, one compact disk (CD) was sub­mitted with an electronic copy of this report. The report on CD contains hyperlinks to the above-mentioned files and directories.

 

IMA Examiner

 

IMA D. EXAMINER