Network Basics for Digital Investigators
Until recently, it was sufficient to look at individual computers as isolated objects containing digital evidence. Computing was disk-centered—collecting a computer and several disks would assure collection of all relevant digital evidence. Today, however, computing has become network-centered as more people rely on e-mail, e-commerce, and other network resources. It is no longer adequate to think about computers in isolation as many of them are connected together using various network technologies. Digital investigators/examiners must ...