O'Reilly logo

Computer Evidence: Collection and Preservation, Second Edition by Christopher L. T. Brown

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Summary

  • Large system collection refers not only to single large digital-storage repositories but also to large environments with dispersed networks of data.

  • After investigators have overcome data volume and dispersion issues, complex technologies such as SAN, NAS, and RAID offer challenges in relation to media access for bit-stream imaging and subsequent analysis.

  • Two critical steps an investigator should perform when faced with RAID array image collection are defining the type of RAID (hardware, software, versions of software, and firmware on RAID controller) and identifying the number, type, and location of each disk within the RAID array.

  • A single disk could be marked as “failed” by its physical removal, even when the system is shut down. (Many ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required