Digital Forensics in Small Devices: RFID Tag Investigation

xi
4.3.4 Analysis of the Physical Drive Image ...................................................... 126
4.3.5 Analysis of RFID Tags in the Repository ................................................ 126
4.3.6 Analysis of CCTV Images and Interview with the Employees ............... 127
4.4 Conclusion ............................................................................................................... 127
Chapter 5 – Research Discussion
5.0 Introduction .............................................................................................................. 128
5.1 Discussion of Research Question ............................................................................. 129
5.1.1 Main Research Question and Associated Hypotheses ............................. 129
5.1.2 Secondary Research Question and Associated Hypotheses …………….130
5.2 Discussion of Findings ............................................................................................. 143
5.2.1 Discussion of Conducted Research Phases .............................................. 143
5.2.2 Discussion of Implemented System Design ............................................ 143
5.2.3 Discussion of Conducted Attack Case Scenario ...................................... 144
5.2.4 Discussions of Identification, Acquisition and Extraction ....................... 144
5.2.5 Discussions of Analysis and Presentation ................................................ 145
5.3 Discussion of Recommendations: Best Practices .................................................... 147
5.3.1 Managing Investigation Output and Investigation
Preparedness: Best Practices ................................................................... 147
5.3.2 Incident Response: Best Practices ........................................................... 148
5.3.3 Precautions for Responding to an SQL
Server Incident: Best Practices ................................................................ 148
5.3.4 Identification, Acquisition and Preservation: Best Practices ................... 149
5.3.5 Analysis of the Acquired Data: Best Practices ........................................ 150
5.4 Conclusion ............................................................................................................... 150
Chapter 6 – Conclusion
6.0 Introduction .............................................................................................................. 152
6.1 Summary of Findings ............................................................................................... 153
6.2 Answer to the Research Questions .......................................................................... 155
6.3 Conclusion and Further Research ............................................................................. 156