CHFI Computer Hacking Forensic Investigator Certification All-in-One Exam Guide

CHAPTER 2

The Nature of Digital Evidence

    In this chapter, you will learn how to

 

        • Define digital evidence and explain its role in the case of a computer security incident

        • Discuss the characteristics of digital evidence and the various types of digital data

        • Discuss Federal Rules of Evidence (FRE) and articulate the best evidence rule

        • Summarize the international principles for computer evidence

        • Differentiate between the Scientific Working Group on Digital Evidence (SWGDE) and the International Organization on Computer Evidence (IOCE)

        • List the considerations for collecting digital evidence from electronic crime scenes

        • Explain electronic crime and digital evidence consideration ...