1) testing and validating forensic reports (write Abstract)
2) Admissibility of evidence-plain view doctrine (write Abstract)
3)  Review the material on routers.
      It is sometimes said that information extracted from a router or switch does not necessarily provide specific evidence of a particular crime. What is meant by that?  If true, what then is the most useful information collected from these devices in an investigation?
4)  Discuss in 500 words or more best practices for incident response in the cloud. Refer to at least one incidence response framework.
Use at least three sources. Include at least 3 quotes from your sources enclosed in quotation marks and cited in-line by reference to your reference list.