O'Reilly logo

Computer Evidence: Collection and Preservation, Second Edition by Christopher L. T. Brown

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Phases of Computer Forensics

The primary goals in computer forensics of collecting, preserving, filtering, and presenting digital artifacts can also be used as guidelines to describe the computer forensics process. We will structure these guidelines as phases of the computer forensics process. It’s no accident that these exact phases are also referred to in a phased approach of the civil discovery process. Let’s discuss the four phases of computer forensics in greater detail.

Collection

The collection phase of computer forensics is when artifacts considered to be of evidentiary value are identified and collected. Normally these artifacts are digital data in the form of disk drives, flash memory drives, or other forms of digital media and data, ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required