Placing the Suspect Behind the Keyboard

Index

A

Aerial surveillance

benefits, 59–60

coordination with ground surveillance, 60–61

video recording, 60

Altered evidence

authenticity validation, 237–238

common access, difficulties, 239–240

hash value, checking, 239

listing possible suspects, 239

metadata embedding, 239

Microsoft Windows operating systems, example, 239

modifying files, 238

possibilities, 237

track changes, checking, 239

two files with the same name, example, 238–239

work schedules and, 240

Analogies

description, electronic data, 175–176

effective use of, 176, 178

of digital forensic community, 175

folder access, listing, 179

password keeping, 177–178

physical access to computer, impact on, 176–177

reasonable comparison, using, 176

for visual aids, 176

Animations, for case ...