Evidence is a critical component of every digital forensics investigation. Whether it is physical or digital, the methodologies and techniques used to gather, process, and handle evidence ultimately affect its meaningfulness, relevancy, and admissibility. Appropriate safeguards must exist throughout the investigative work to provide assurance that the lifecycle of evidence is forensically sound.
Following the High-Level Digital Forensics Process Model outlined in Chapter 2, “Investigative Process Methodology,” each phase of the investigative workflow will be examined to determine the requirements for managing evidence through its lifetime.
Like how the Confidentiality, Integrity, and Availability ...
Get Implementing Digital Forensic Readiness, 2nd Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
