O'Reilly logo

Computer Evidence: Collection and Preservation, Second Edition by Christopher L. T. Brown

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Part IV: Artifact Collection

The methods employed for the collection of computer evidence can be one of the most highly scrutinized areas of the computer forensics process. It is essential that investigators use tested and proven methodologies and tools during this task. Part IV, “Artifact Collection,” provides detailed procedures for artifact collection as well as a discussion about an array of tools available for digital evidence collection. In Part IV, investigators are shown the importance of collecting volatile data in addition to static data on disk. Single systems and large-scale evidence collection methodologies are discussed.

 

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required