O'Reilly logo

Practical Digital Forensics by Richard Boddington

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Locating evidence in filesystems

The nature of the transgression to some extent dictates the type of relevant evidence that may be recovered. For example, in a homicide where the victim died of gunshot wounds, it would be helpful to determine the time, location, and cause of death. A search would commence for the weapon; discharged bullets or shot, spent cartridges; gunpowder residue; blood spatter; and projectile trajectory data. At a microscopic level, DNA analysis of samples from the spent cartridge, chemical analysis of the gunpowder residue, postmortem analysis to determine the cause of death, and so forth will be undertaken.

Locard's exchange principle, described in Chapter 1, The Role of Digital Forensics and Its Environment, is as relevant ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required