Actively Investigating the Case
Now this is where the work begins! There is very little in investigating a case that is high-tech specific. The most important thing is to follow a process where facts are collected and hypotheses about potential crimes and suspects are formulated. Facts are usually established through eyewitness accounts and raw evidence collection. The process of computer forensics details how to collect evidence from computers, networks, and devices such as Palm Pilots, cell phones, and pagers. While the techniques are beyond the scope of this text, know that computer forensics is a part of the total investigation.
It is important, however, to be aware of some facts. One is that high technology evidence is perishable and should ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access