Chapter 1 : Computer Forensics / Topic : Incident Verification and System Identification / Content : 5-assigning a team leader assigning technical staff 6-performing traditional investigative steps a-host-based evidence b-network-based evidence c-other evidence 7-conducting interviews getting contact information interviewing system administrators interviewing managers interviewing end users 8-formulating a response strategy response strategy consideration policy verification