O'Reilly logo

Computer Evidence: Collection and Preservation, Second Edition by Christopher L. T. Brown

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Documentation

An old Navy saying, “If it wasn’t logged, it didn’t happen,” comes to mind when thinking about documentation and the computer forensics process. Documenting investigators’ actions at every step of the computer forensics process cannot be emphasized enough. Investigators in practice take different approaches to documentation. Some use a collection of preformatted evidence-collection worksheets, chain-of-custody, and examination forms to document their collection and examination. Other investigators take digital photos of the collection process as well as the examination process to document cable locations and disassembly procedures. Still others find it helpful to open a new composition notebook and keep a narrative log of their ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required