Building a Digital Forensic Laboratory

Chapter 10. Responding to Crimes Requiring Digital Forensic Investigation

Introduction

This chapter will look at what actions are required in digital forensic investigation, as well as various management considerations, and (just as importantly) what should not be done when responding to a crime involving artifacts that possibly contain digital evidence. It will deal with the differing requirements that must be considered for the range of investigations the unit may be called on to take part in, including items such as stand-alone devices, servers, networks, live acquisition, and wireless, and will discuss management issues relating to the use of function-specific tools.

Capabilities

This chapter is about how the digital forensic investigator ...