Computer Forensics and Proper Collection of Evidence

I just spilled coffee on our only evidence.

Response: Case closed. Let’s all go home.

Forensics is a science and an art that requires specialized techniques for the recovery, authentication, and analysis of electronic data for the purposes of a criminal act. Specific processes exist relating to reconstruction of computer usage, examination of residual data, authentication of data by technical analysis or explanation of technical features of data, and computer usage. This is not something the ordinary network administrator should be carrying out.

Note

Digital Forensics Science (DFS) is the study ...

Get CISSP Certification All-in-One Exam Guide, Fourth Edition, 4th Edition now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.