Bag and tag forensics

A go-bag includes a list of things that are required in case of an emergency. The role of a digital forensic analyst is to perform analysis on digital devices such as computers, storage devices, mobile phones, cameras, or any type of digital device (Jo & et al., 2018). They gather required evidences to investigate a crime and helps in solving the crime. Personally go-bag must include some hardware’s and software’s. The First thing that the go bag of any forensic analyst should contain is the storage devices like a laptop or external hard disk or USB. This drive should contain the soft copy of some documents like examination forms, checklists of what needs to be investigated. The next thing to go in my go bag is some software forensic tools i.e. the sleuth kit, the coroner’s toolkit, SPEKTOR forensic intelligence, and many more. The next thing that a forensic analyst needs is the bootable USB’s (Khan & et al., 2018). If the USB that is carried is not working or corrupted, it is always advisable to carry bootable USB. The following hardware is good to have in the go-bag. Every time there won’t be a required type of slot hence, Adapters for converting USB to USB-C or USB-C to Ethernet are required. The other thing which is required is a multiple power outlet box. At times there won’t be sufficient power outlets therefore multiple power outlet box can help to connect more devices. The next is the screwdrivers. Often screwdrivers are required to remove any internal components. Other miscellaneous things include scissors for cutting any tags or ties, faraday bags to keep evidence disconnect so that wiping the data remotely becomes impossible, camera to capture any physical evidence, card-reader in case the evidence is from a digital camera, dongles, pens, notebooks, clips, post-its, writable CD’s, Evidence tags in case if the evidence likely to be submitted in the court, Evidence seals, hard copy documents if any. A Digital Forensic Analyst should always carry a go-bag. In some cases, he or she might require the above-mentioned things while performing investigation, without which the investigation might get interrupted (Sandeepak Bhandari & Vacius Jusas, 2020).