Environmental

For this week’s discussion, complete the following questions below in detail. Please discuss thoroughly and substantively in your post.

Discuss in detail what is and why you need to use a write blocker (either hardware or software) in your examinations, whether for a criminal case or a corporate case. Give a good explanation for your answer.
Imagine you are a computer forensic examiner receiving a suspect hard disk drive from a detective in your department. The drive was seized properly during a legally executed search warrant. The detective signs the chain of custody log and hands you the drive. Your job is to accept the drive, conduct an analysis, and maintain the drive until trial. Number and explain the steps you would take, from receipt of the evidence until testimony, including the reasons why you would take each step. For example, what would you check for when you sign for the drive on the chain of custody document?