O'Reilly logo

System Forensics, Investigation, and Response by K Rudolph, John R. Vacca

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Chapter 6. Controlling a Forensic Investigation

A COMPUTER FORENSICS CRIME SCENE INVESTIGATION should begin with a plan to approach and secure the crime scene. As a forensic specialist, you must identify and collect evidence or potential evidence, and you must process and analyze the evidence so that it has value in court. Forensic specialists must carefully document crime scene activity and all activity related to evidence.

Computer evidence frequently faces challenges in court. Most challenges are related to the evidence's authenticity. The courts want to know whether the data was altered. They also question whether the program that generated the output was reliable. Other challenges in court can involve the forensic analyst. Attorneys sometimes ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required