Chapter 21

Network Basics for Digital Investigators

Eoghan Casey


Until recently, it was sufficient to look at individual computers as isolated objects containing digital evidence. Computing was disk-centered—collecting a computer and several disks would assure collection of all relevant digital evidence. Today, however, computing has become network-centered as more people rely on e-mail, e-commerce, and other network resources. It is no longer adequate to think about computers in isolation as many of them are connected together using various network technologies. Digital investigators/examiners must ...

Get Digital Evidence and Computer Crime, 3rd Edition now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.