Chapter 2

The key to forensic success: examination planning is a key determinant of efficient and effective digital forensics

Mark Pollitt    Digital Evidence Professional Services, Inc., MD, USA


The examination of digital evidence, also known as digital forensics, is a technically challenging endeavor. The examination of computers, storage devices, mobile devices, and network traffic requires a great deal of knowledge, skill, and experience coupled with a constantly evolving set of hardware and software tools. Digital forensic examiners are faced with ever-increasing volumes of data, with more complex requests. At the same time, those who need information from these examinations, whether for criminal, civil, regulatory, or human resources ...

Get Digital Forensics now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.