Question

A forensic investigator at a crime lab is performing a forensic analysis of a hard drive that was brought in by state troopers. They make a mistake by using the wrong forensic tool during their forensics examination. What should the investigator do?a. Document the mistake and workaround the problem.b. Document the mistake and press on with remaining tasksc. Disclose the mistake and assess another area of the hard drived. Disclose the mistake and preserve the chain of custody

Answer 1

Answer:

Document the mistake and workaround the problem.

Explanation:

Best practice suggest that the forensic investigator should document the mistake and work around the problem because using the wrong forensic tool doesn't prove that the hard drive was tampered with  and he/she should not look into another area of the hard drive until there is a reasonable solution.