O'Reilly logo

Computer Evidence: Collection and Preservation, Second Edition by Christopher L. T. Brown

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Approaches to Collection

Disk evidence is easily the cornerstone of computer forensics if for no other reason than that digital evidence on disk is as easy to relate to a judge and jury as files in a file cabinet. However, the completeness and accuracy of digital evidence collection is often questioned in the legal arena. In an effort to fend off evidentiary challenges relating to the evidence dynamics of disk collection and analysis, computer forensics investigators have for some time placed a major emphasis on careful disk collection and handling.

For a variety of reasons, including the volatility of disk data and the potential destructive nature of handling and analysis, computer forensics investigators agree that creating a copy of a disk ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required