8/17/25, 4:04 CHFI - my WGU notes Flashcards |
PM Quizlet
CHFI - my WGU notes | personalized STUDY GUIDE
• 101 - Govern proceedings in the US and before UC bankruptcy judges
and magistrate judges
• 102 - Purpose and construction - the truth may be ascertained and
proceedings justly determined
• 103 - Ruling on evidence (if error- how to deal with it, if objection - how to
deal with etc)
• 105 - Limited admissibility - When evidence is admissible or not. When
admissible for one purpose but not another, the court will restrict the evidence
to its scope
• Rule 402 - General Admissibility of Relevant Evidence
US Federal Rules of Evidence • Rule 502 - Attorney-Client privilege and work product; Limitations on waiver
• Rule 608 - Evidence of character and conduct of witness
• Rule 609 - Impeachment by evidence of a criminal conviction
• Rule 614 - Calling and interrogation of witnesses by court
• Rule 701 - Opinion testimony by lay witnesses
• Rule 705 - Disclosure of facts or data underlying expert opinion
• 801 - 804 Hearsay - Relaying to something 3rd party stated
• Rule 901 - Authenticating or Identifying Evidence
• 1001 - Definitions
• 1002 Requirement of original
• 1003 - Admissibility of Duplicates
• 1004 - Admissibility of other evidence of content
1/
15
, 8/17/25, 4:04 CHFI - my WGU notes Flashcards |
PM Quizlet
Based on the SWGDE work to create the set of standards for gathering of digital
evidence.
• Criteria 1.1 - All agencies that seize and/or examine digital evidence must
maintain an appropriate SOP document
• Criteria 1.2 - Agency management must review the SOPs annually
• Criteria 1.3 - Procedures used must be generally accepted in the field
• Criteria 1.4 - The agency must maintain written copies of appropriate
SWGDE technical procedures
• Criteria 1.5 - The agency must use hardware and software that is
appropriate and effective
• Criteria 1.6 - All activities must be recorded in writing and be available for
review and testimony
• Criteria 1.7 - Any action that has the potential to alter, damage, or destroy
any aspect of original evidence must be performed by qualified persons in a
forensically sound manner
*Cloud as a subject It refers to a crime in which the attackers try to compromise
the security of a cloud environment to steal data or inject a malware. Ex: Identity
theft of cloud user's accounts, unauthorized modification or deletion of data
stored in the Cloud, installation of malware on the cloud, etc.
*Cloud as an object when the attacker uses the cloud to commit a crime
Cloud Crime
targeted towards the CSP. The main aim of the attacker is to impact cloud service
provider. Ex: DDoS attacks that can bring the whole cloud down.
*Cloud as a tool when the attacker uses one compromised cloud account to attack
other accounts. In such cases, both the source and target cloud can store the
evidence data.
Govern proceedings in the courts of the U.S. and before U.S. bankruptcy judges
Rule 101
and the U.S. magistrate judges, to the extent and with the exceptions stated in rule
1101
Purpose and construction Rule 102
law of evidence to the end that the truth
may be ascertained and proceedings justly
determined
Rule 103 Rulings on evidence
Limited Admissibility
When evidence is admissible or not and under what conditions 2. When evidence is
Rule 105
admissible for one purpose but not another, the court will restrict the evidence to
its scope
Definitions
Consist of letters, words, or numbers, or their equivalent, set down by handwriting,
Rule 1001
typewriting, printing, photostating, photographing, magnetic impulse, mechanical or
electric recording, or other forms of data
2/
15
PM Quizlet
CHFI - my WGU notes | personalized STUDY GUIDE
• 101 - Govern proceedings in the US and before UC bankruptcy judges
and magistrate judges
• 102 - Purpose and construction - the truth may be ascertained and
proceedings justly determined
• 103 - Ruling on evidence (if error- how to deal with it, if objection - how to
deal with etc)
• 105 - Limited admissibility - When evidence is admissible or not. When
admissible for one purpose but not another, the court will restrict the evidence
to its scope
• Rule 402 - General Admissibility of Relevant Evidence
US Federal Rules of Evidence • Rule 502 - Attorney-Client privilege and work product; Limitations on waiver
• Rule 608 - Evidence of character and conduct of witness
• Rule 609 - Impeachment by evidence of a criminal conviction
• Rule 614 - Calling and interrogation of witnesses by court
• Rule 701 - Opinion testimony by lay witnesses
• Rule 705 - Disclosure of facts or data underlying expert opinion
• 801 - 804 Hearsay - Relaying to something 3rd party stated
• Rule 901 - Authenticating or Identifying Evidence
• 1001 - Definitions
• 1002 Requirement of original
• 1003 - Admissibility of Duplicates
• 1004 - Admissibility of other evidence of content
1/
15
, 8/17/25, 4:04 CHFI - my WGU notes Flashcards |
PM Quizlet
Based on the SWGDE work to create the set of standards for gathering of digital
evidence.
• Criteria 1.1 - All agencies that seize and/or examine digital evidence must
maintain an appropriate SOP document
• Criteria 1.2 - Agency management must review the SOPs annually
• Criteria 1.3 - Procedures used must be generally accepted in the field
• Criteria 1.4 - The agency must maintain written copies of appropriate
SWGDE technical procedures
• Criteria 1.5 - The agency must use hardware and software that is
appropriate and effective
• Criteria 1.6 - All activities must be recorded in writing and be available for
review and testimony
• Criteria 1.7 - Any action that has the potential to alter, damage, or destroy
any aspect of original evidence must be performed by qualified persons in a
forensically sound manner
*Cloud as a subject It refers to a crime in which the attackers try to compromise
the security of a cloud environment to steal data or inject a malware. Ex: Identity
theft of cloud user's accounts, unauthorized modification or deletion of data
stored in the Cloud, installation of malware on the cloud, etc.
*Cloud as an object when the attacker uses the cloud to commit a crime
Cloud Crime
targeted towards the CSP. The main aim of the attacker is to impact cloud service
provider. Ex: DDoS attacks that can bring the whole cloud down.
*Cloud as a tool when the attacker uses one compromised cloud account to attack
other accounts. In such cases, both the source and target cloud can store the
evidence data.
Govern proceedings in the courts of the U.S. and before U.S. bankruptcy judges
Rule 101
and the U.S. magistrate judges, to the extent and with the exceptions stated in rule
1101
Purpose and construction Rule 102
law of evidence to the end that the truth
may be ascertained and proceedings justly
determined
Rule 103 Rulings on evidence
Limited Admissibility
When evidence is admissible or not and under what conditions 2. When evidence is
Rule 105
admissible for one purpose but not another, the court will restrict the evidence to
its scope
Definitions
Consist of letters, words, or numbers, or their equivalent, set down by handwriting,
Rule 1001
typewriting, printing, photostating, photographing, magnetic impulse, mechanical or
electric recording, or other forms of data
2/
15
