Chapter 2
The key to forensic success: examination planning is a key determinant of efficient and effective digital forensics
Mark Pollitt Digital Evidence Professional Services, Inc., MD, USA
Abstract
The examination of digital evidence, also known as digital forensics, is a technically challenging endeavor. The examination of computers, storage devices, mobile devices, and network traffic requires a great deal of knowledge, skill, and experience coupled with a constantly evolving set of hardware and software tools. Digital forensic examiners are faced with ever-increasing volumes of data, with more complex requests. At the same time, those who need information from these examinations, whether for criminal, civil, regulatory, or human resources ...
Get Digital Forensics now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
