Chapter 10. Responding to Crimes Requiring Digital Forensic Investigation


This chapter will look at what actions are required in digital forensic investigation, as well as various management considerations, and (just as importantly) what should not be done when responding to a crime involving artifacts that possibly contain digital evidence. It will deal with the differing requirements that must be considered for the range of investigations the unit may be called on to take part in, including items such as stand-alone devices, servers, networks, live acquisition, and wireless, and will discuss management issues relating to the use of function-specific tools.


This chapter is about how the digital forensic investigator ...

Get Building a Digital Forensic Laboratory now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.