A Practical Guide to Digital Forensics Investigations, 2nd Edition

Chapter 3

Handling Computer Hardware

Learning Outcomes

After reading this chapter, you will be able to understand the following:

• The importance of being able to recognize different types of computer hardware;

• The various disk drive interfaces that an investigator can encounter;

• The types of devices used to forensically extract data from different storage devices;

• The variety of storage media used and how this evidence should be handled and analyzed; and

• The use of storage media in actual investigations.

As an aspiring computer forensics investigator, you should develop an understanding of computer hardware, for several reasons. The first reason is that certain types of systems and hardware will only support certain types of software, in terms ...