Appendix A: Investigative Process Models

Introduction

When technology was first involved with criminal activities, investigators did not follow any guiding principles, methodologies, or techniques when it came time to collect and process digital evidence. It was only in the 1980s that law enforcement agencies realized there was a need to have an established set of processes that could be consistently followed to support their forensic investigations and guarantee the legal admissibility of digital evidence.

Over the years, several authors have taken on the task of developing and proposing a process model to formalize the digital forensics discipline and transform “ad-hoc” tasks and activities into tested and proven methodologies. Displayed in ...

Get Implementing Digital Forensic Readiness, 2nd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.