Digital Forensics Explained

23

digital forensiC aPProaChes and Best PraCtiCes

Once the response plan has been created and authorized, the scene should be

secured as soon as the responders arrive on location. In a corporate environment,

this may mean having security prevent access. In a law enforcement environment,

this may involve coordination with other types of investigators. Bottom line is that

if someone is not helping, then they should not be there. Diagram and photograph

the scene. Photographs should be of multiple angles and attempt to take pictures

that show how everything is connected to the computer. If you are taking the com-

puter with you, label the cables and ...