|
November
Meeting
Date:
Tuesday, November
1, 2005
Time: Social Hour, 5 PM,
Dinner, 6 pm
Place: Sons
of Italy, Norwalk
Click
here for a map and directions
Speaker: Captain
Rosemary Arway
Commanding Officer-
Investigative Services Unit
Norwalk Police Department
Topic: Contemporary
Issues Facing
Police Services
Chapter News
click on the headline for more info
CT
Department of Emergency Management and Homeland Security Publishes
Guide to Emergency Preparedness .
Download a copy here
New York State
Publishes Household
Emergency Preparedness Brochure.
Download a copy here
Western
New Jersey Chapter Seminar coming up on October 11 in Morristown.
Click
here for more info
Meeting Schedule
Meeting
Minutes
Treasurer's Report
To sign up for the
chapter email update,
click here.
|
Upcoming
Speaker:
Captain
Rosemary Arway, Norwalk, PD
Captain
Arway is currently the commanding office of the Investigative Services
Unit, which includes the Detective Division, Special Services
Division, Task Force and other units, as well as interfacing with
Federal and other LE agencies
Captain
Arway has been with Norwalk PD since 1980 and has held a wide range of
positions and commands. She has earned a Master of Science in
Psychology and a Doctorate in Counseling Psychology. She is also
an adjunct professor at Norwalk Community College.
_______________________________
October's
Speaker,
John
Fretts
Basic
Computer Forensics
John's
presentation included an overview of what steps to take when faced
with a computer which may contain data that could be usable as
evidence in an investigation. First,
when presented with a computer that must be examined forensically, do
not turn it on. Turning it on won't change any data, but
will change date records which can raise chain of custody issues and
can make the evidence obtained from the computer questionable. Use
a boot disc and software to make an image or copy of the drive and use
the copy for the investigation, while maintaining strict custodial
controls over the original drive. Second,
deleted files can almost always be recovered. Windows file
system does not remove or entirely delete data when a file is
deleted. It simple changes the first character in the file's
name and to one which the operating system recognizes as one that
enables it to use the disk space occupied by the deleted file.
Until the actual file space is overwritten by the computer, the data
is quite recoverable. Even if some of the disk has been
overwritten, often much a file can be recovered. Third,
examining a computer for forensic purposes is not really a do it
yourself project. There are many programs on the market that can
assist you, but a thorough knowledge of the operating system, as well
as an understanding of what the programs do and don't do is essential
to a successful investigation.
_______________________________
Chapter
Membership Survey
The
chapter board will be conduct some surveys this fall to determine a
number of things to make the meetings more interesting and
convenient. Click on the link below for the first one, Topics of
Interest.
SURVEY
_______________________________
Newsletter Archive
Click on the button below
to go to the Chapter News archive from previous months. Links
on the archives will stay active, so you can find previous items of
interest.
|
