"Computer Forensics: High-Tech Law Enforcement" Garber, Lee. IEEE
Computer. January 2001. pg.22-27.

"Forensic Methodologies: A computer Forensic Professional's Compass."
Kuchta, Kelly J. Information Systems Security January/February 2002

"EPIC analysis of New Justice Department Guidelines on Searching and
Seizing Computers". 
http://www.cpsr.org%20/cpsr/privacy/epic/guidelines_analysis.txt

-How might computer forensics make it easier for law enforcement to do
there job?

-Is having to obtain a warrant sufficient to protect personal privacy in
this new field?  Is it possible to have a warrant that is pointed enough to
limit searching to a subset of information on a drive?

-In the side note "Nerd with a gun" how does the last sentence make you feel
about this field?  Does it seem that a single individual is getting too much
power without a sufficient check system?

-Is publishing this info of where information is found even after "deletion"
dangerous since it can inform criminals how to better avoid leaving
evidence?  Were you a "perpitrator" how would this article influence
your choice of operating systems?

-In this article, Garber mentions the difficulty of finding, on
MSWindows  systems, files that do not have standard file extensions.
How do unix systems typically determine file types?  What is the
standard unix utility that does what he was trying to do?

-How are modifications to a paper document detected?  Is it possible to
detect modifications to magnetic media in the same way?  How is it
that the integrity of data on magnetic media can be assured? What do
the procedures (from the new article) have to say about this? In light
of its mutability, how is it that data from confiscated magnetic media
can be admitted as evidence?

-What do you think about useing a Linux cluster to break encrypted
files?  What does this plan have to say about the degree of expertise
of the investigators.

-How do the step by step recomendations from the Justice Department
affect the investigators in this article?  Do they seem to be
following them and is it a problem that they are not required to do
so?  Do the guidelines have any power at all without requiring
investigations to follow them?

-Knowing all we do, is it realistic for this type of data to hold up in court?