O'Reilly logo

Computer Evidence: Collection and Preservation, Second Edition by Christopher L. T. Brown

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Analysis and Reporting

In the Introduction of this book, investigators were introduced to the four phases of computer forensics:

  • Collection

  • Preservation

  • Filtering (Analysis)

  • Presentation

Now that investigators have covered basic skills and components of the first two phases, collection and preservation, it seems only fitting that filtering and presentation should be on the “what’s next” list. Once the critical stages of identifying, collecting, and preserving the evidence have taken place, it would seem that forensics investigators are free to analyze the evidence at their leisure. Indeed, the ability to recover from mistakes during the analysis phase is one of the benefits afforded by the bit-stream imaging process. Analysis can be a complex stage, ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required