Computer Forensics and Proper Collection of Evidence

I just spilled coffee on our only evidence.

Response: Case closed. Let’s all go home.

Forensics is a science and an art that requires specialized techniques for the recovery, authentication, and analysis of electronic data for the purposes of a criminal act. Specific processes exist relating to reconstruction of computer usage, examination of residual data, authentication of data by technical analysis or explanation of technical features of data, and computer usage. This is not something the ordinary network administrator should be carrying out.


Digital Forensics Science (DFS) is the study ...

Get CISSP Certification All-in-One Exam Guide, Fourth Edition, 4th Edition now with the O’Reilly learning platform.

O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.