Computer Forensics JumpStart

T

Tank, United States v. , 12

Tech Assist, Inc., 251

technical concepts, explaining in court , 57-58, 234

Technical Resource Center, 250, 251

Technology Pathways, 250

ProDiscover, 168-169 , 169 , 182 , 182

technology, use in presentations, 92

Tektron Solutions, 250

telecommuting , 23

template for report, 205

temporary files, 121-122, 156

temporary Internet files, 272

folder, 120

terrorists, steganography use by, 151

testimonial evidence, 56-57 , 272

testimony

answers to questions

completeness, 231-232

conciseness, 231

permission to use notes, 230

remembering audience, 232-233

appearance, 226-227

attitude, 227

clothing, 226

grooming, 226-227

communication, 227-229

listening, 228

tone of speech, 228-229

vocabulary, 229

documentation for, 56

explaining forensic process, 229-231

best practices, 230

documentation, 230

justifying investigation steps, 235-236

preparation, 199-200, 222-226

understanding strategy, 225

understanding the case, 224

understanding witness role, 225-226

real world scenario, 233

simplicity, 234-235

feedback, 235

presentation aids, 234-235

for technical concepts, 234

Text Search Plus, 186-187

Text Searcher, 178

ThumbsPlus File Viewer, 187, 251

time stamps, 7, 203

timeline, of file activity, 122, 202-203

Timmins, Paul G., 6

.tmp file extension, 121-122

tone of speech, in court proceedings , 228-229

trace evidence, 135-136, 272

traceroute command, 101, 272

output, 102

tracert command (Windows), 101

training to fight cybercrime , 13-18

end users, 15-18

practitioners , 13-15

transient files, 79

Transmission Control Protocol/Internet Protocol (TCP/IP), 123, 272

Transmission Control Protocol (TCP), connection between target and forensic workstation, 101

transporting evidence, 201

Triple DES (3DES), 149

Trojan horses, 120, 134

Tunstall and Tunstall, 250