The Basics

There are a few basic stages that all investigations have to go through.

  1. Something suspicious is uncovered.

  2. An investigator starts collecting information.

  3. How the crimes were committed and who did them is deduced.

  4. Guilty parties are brought to justice.

Notice that a good case does not start off with a suspect in mind. That is very different from our natural tendency, because people usually operate in terms of people. Looking back at Chapter 1, you will remember that the system administrators already had a suspect in mind when they started investigating. Even though they had identified the right person, they were proceeding to investigate the case in a way that could have missed the severity of the issues, possibly running a case that ...

Get HIGH-TECH CRIMES REVEALED: CYBERWAR STORIES FROM THE DIGITAL FRONT now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.