Practioner's Guide to Gathering Electronic Forensic Evidence
1st Edition
Published in June 2004
Book
Paperback/Softback
320 pages
978-0-8493-1933-4 (ISBN)
Description
Practitioner's Guide to Gathering Electronic Forensic Evidence is dedicated to evidence gathering in the PC environment and provides the reader with an understanding of the various forms of information can be used in a court of law as evidence. The book looks at approaches to identifying and gathering evidence and some of the tools needed to accomplish this. The authors describe in detail exactly where the data is stored and how PC operating systems deal with reading and writing to disk. They also discuss other locations where information may be stored purposely to avoid discovery as well as methods and tools for browsing those locations and making copies of relevant data that may be found there.
More details
Language
English
Place of publication
Bosa Roca
United States
Publishing group
Taylor & Francis Inc
Target group
College/higher education
Professional and scholarly
Illustrations
30 s/w Abbildungen
30 Illustrations, black and white
Dimensions
Height: 229 mm
Width: 152 mm
ISBN-13
978-0-8493-1933-4 (9780849319334)
Copyright in bibliographic data is held by Nielsen Book Services Limited or its licensors: all rights reserved.
Schweitzer Classification
Content
Preparation for an Electronic Investigation. Forensic Evidence in Computing. Legal Precedents for Electronic Evidence Gathering Methods. Definitions. Understanding Hard Disk Geometry. Acquisition. Preservation. Understanding Backup Options. Specialized Online and Offline Storage. Personal Data Assistants. Photocopiers. Fax Machines/Telecommunications Devices. Cellular Phones/Pagers. Physical Storage of Evidentiary Copies. System Acquisition - Seizure. Working with the Original Evidence. Investigating What's on the PC. Surveillance Techniques. Encountering Encryption. Encountering Steganography. Analysis and Reporting Findings. Reporting What Has Been Found. Network Forensics. Incidence Response. Research and Development. Conventional Forensics. Tools for Forensic Science. The Issue of Forensic Credentials. Setting Up an Electronic Forensics Laboratory. Other Sources of Information. Professional Organizations. Special Interest Groups. International Legislation. Case Forms.