Computer Forensics. What is Computer Forensics?. Scientific process of preserving, identifying, extracting, documenting, and interpreting data on a computer Used to obtain potential legal evidence. Computer Forensics Procedures. The Forensic Paradigm . Analysis and Evaluation. Collection.
Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.
The Forensic Paradigm
Digital forensics does not replace traditional forensic analysis
Any action that modifies the crime scene could invalidate evidence in court
LAPTOP at Crime Scene
A computer on a crime scene should be considered fully adversarial
Commercial products such as EnCase are recognized by law.What is the best approach?
14 di 7
During Forensic is important to do not use any tools that write to the disk