CHFI Computer Hacking Forensic Investigator Certification All-in-One Exam Guide

GLOSSARY

Unlike information security and information assurance, there doesn’t seem to be a definitive glossary for digital forensics. I compiled this glossary based on definitions from three NIST special publications:

        • SP800-72 Guidelines on PDA Forensics (2004)

        • S800-86 Guide to Integrating Forensic Techniques into Incident Response (2006)

        • SP800-101r Guidelines on Mobile Device Forensics (2014)

The most recent definition of a term is the one provided.

acquisition A process by which digital evidence is duplicated, copied, or imaged.

analysis The third phase of the computer and network forensic process, which involves using legally justifiable methods and techniques to derive useful information that addresses the ...