Please enable JavaScript.

Coggle requires JavaScript to display documents.

Group 4 FAIZ ZAKWAN BIN REJMI AHMAD ZULHLIMI FAIZ BIN MOHD ZAID VANESSA…

- - - - System Administrator and a Computer Forensics Expert
      - Document
        
        Must be extremely detailed.
        
        Contain:
        
        Evidence
        
        Reference used to find the evidence.
        
        Equipment used to find the evidence.
        
        If illegal activity is discovered, it is recommended to document the following:
        
        Initial reason for accessing the computer or network
        
        Time and date
        
        Peripherals that are connected to the computer
        
        All network connections
        
        Physical area where the computer is located
        
        Illegal material found
        
        Illegal activity that you have witnessed (or you suspect has occurred)
        
        Which procedures you have executed on the computer or network
  - - - Going through authentication, a system administor must:
        
        Where has it been stored physically.
        
        Who has had access to it between the time of collection and its entry into the court proceedings.
        
        Prove how the evidence was collected.
- - - - Stored on local drive, when computer
        turned off this data is preserved
    - - Stored in Ram and cache, disappears
        when computer is turned off
- - - - If no, proceed to the next step.
      - Does searching the computer's online Help and Support files produce a solution?
        
        Does searching the manufacturer's Web sites produce a solution?
        
        If no, proceed to the next step.
        
        If yes, then document the solution. Then, end the call.
        
        Does searching technical sites produce a solution?
        
        If yes, then document the solution. Then, end the call.
        
        If no, escalate the call. Then, document all attempted solution.
        
        If no, undo changes made to the computer and document attempted solution. Then, proceed to the next step.
        
        If yes, then document the solution. Then, end the call.
      - If yes, then document the solution. Then, end the call.
  - - - 2 (Urgent)
        
        One (or more) of the company's computers is not functioning correctly.
        
        Hardware
      - 2 (Urgent)
        
        One (or more) of the company's computers is experiencing software or operating system errors.
        
        Software
      - 1 (Most Urgent)
        
        the company cannot operate any of its computer equipment
        
        Down
      - 2 (Urgent)
        
        One (or more) of the company's computers cannot access the network.
        
        Network
      - Priority
        
        Definition
        
        Name
      - 3 (Important)
        
        There has been a request from the company for additional computer functionality.
        
        Enhancement