500 likes | 754 Views
Guide to Computer Forensics and Investigations, 2e. 2. Understanding Computer Forensics Analysis. Examining and analyzing digital evidenceNature of the caseAmount of data to processWhatever covered by search warrantsCourt ordersCompany policiesMight be specific targetMight be ?as much as you
E N D
1. ITIS 4250Computer Forensics Chapter 10
Computer Forensics Analysis
and Validation
2. Guide to Computer Forensics and Investigations, 2e 2 Understanding Computer Forensics Analysis Examining and analyzing digital evidence
Nature of the case
Amount of data to process
Whatever covered by search warrants
Court orders
Company policies
Might be specific target
Might be “as much as you can get”
3. Guide to Computer Forensics and Investigations, 2e 3 Understanding Computer Forensics Analysis Scope creep
New evidence prompts need for more evidence
Widens scope
Increase need for time/resources
Right of full discovery of digital evidence
Defense learns of prosecution’s evidence
Criminal only – civil different
4. Guide to Computer Forensics and Investigations, 2e 4 Investigation Plan Basic plan involves
Goal of investigation
Resources needed
Hardware
Software
People
Tasks to perform
May need refinement
5. Guide to Computer Forensics and Investigations, 2e 5 Investigation Plan