
310 Cyberpower
• How can results be presented to non-specialists?
• How can one avoid digital evidence becoming a false alibi?
• Whichelementsmightcontainper0nent
informa0onforthecasebeinginves0gated?
• Howcantherelevantdatatobeseizedasa
prioritybeiden0fied?
• Wherearethedata?
• Howcandatabecollected,storedand
preserved?
• Howcaninves0gatorsproceed?
• Whataretheproceduralrulestobefollowed?
Figure 10.9 Many sources of dif culties when searching for digital evidence.
To begin to answer these questions, some ICT computer forensic tools and
procedures have been developed. However, only specially trained ...