O'Reilly logo

Computer Evidence: Collection and Preservation, Second Edition by Christopher L. T. Brown

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Forces of Evidence Dynamics

In Chapter 1, “Computer Forensics Essentials,” the importance of Locard’s exchange principle was introduced in its relationship to crime scene investigation. Remember that Locard’s exchange principle is simply a way to describe two objects interacting and the resulting exchange. This basic concept can be further extended to describe the concept of evidence dynamics, covered in this chapter.

Note

Locard’s exchange principle states that when any two objects come into contact, there is always transference of material from each object onto the other. This exchange is illustrated in Figure 3.1. Operating system logs recording ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required