Implementing Digital Forensic Readiness

Chapter 6

Identify Potential Data Sources

Abstract

Documentation of the data sources that are available as potential digital evidence is very important. While the purpose of this stage is to establish the scope of what data sources are readily available, it can also be used in support of a gap analysis to identify where digital evidence is not sufficient.

Keywords

Architecture; Breach; Context; Contracts; Evidence; Inventory; Sources

 

This chapter discusses the second stage for implementing a digital forensic readiness program as the need to identify and document data sources. From establishing an inventory of the systems and applications where data is readily available, organizations can not only better determine where data relevant to digital forensic ...