Chapter 2
Preparation—What to Do Before You Start
- Identifying different types of hardware
- Checking for unauthorized hardware
- Keeping up with hardware trends
- Knowing various operating systems
- Knowing different types of file systems
- Identifying maintenance tools
- Knowing legal rights and limits
- Forming an incident response team
Be prepared! This motto is especially true for computer forensics. To do a thorough job, a computer forensic investigator should know the hardware, operating systems, file systems, and networking solutions associated with all equipment under investigation. Most organizations have incident response teams that can provide this information for forensic situations, or assist with its compilation.
As an investigator, you must ...
