Chapter 6

Digital forensics in an eDiscovery world

Rob Attoe    Marshall University, WV, USA


The ever-changing landscape of digital evidence locations and hardware devices hosting electronic data, the Forensic Examiner and experts in the investigations field are looking for new ways to deal with vast amounts of unstructured data. eDiscovery workflows have the potential to enhance the digital forensic investigator’s ability to cull through vast amounts of electronic data collected from many devices that are now being brought into custody for examination.

Recent leaps in software capabilities in the eDiscovery realm have given the digital examiner more options to apply EDRM workflows to successfully complete an investigation in a timely ...

Get Digital Forensics now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.