Chapter 6

Identify Potential Data Sources


Documentation of the data sources that are available as potential digital evidence is very important. While the purpose of this stage is to establish the scope of what data sources are readily available, it can also be used in support of a gap analysis to identify where digital evidence is not sufficient.


Architecture; Breach; Context; Contracts; Evidence; Inventory; Sources
This chapter discusses the second stage for implementing a digital forensic readiness program as the need to identify and document data sources. From establishing an inventory of the systems and applications where data is readily available, organizations can not only better determine where data relevant to digital forensic ...

Get Implementing Digital Forensic Readiness now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.