O'Reilly logo

Practical Digital Forensics by Richard Boddington

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Chapter 4. Recovering and Preserving Digital Evidence

The importance of recovering and preserving digital evidence collected from a broad range of devices and the processes used to do so are looked at in this chapter. The chapter explains the importance of preserving digital evidence in line with legal expectations. It describes the forensic processes and tools used to acquire digital evidence without undue contamination. The topics covered in this chapter are as follows:

  • The concept of the chain of custody in relation to the preservation of evidence from its collection up to its tendering in legal proceedings
  • The acquisition and safe custody of digital devices and data
  • The recovery of digital evidence through forensic imaging processes, also known ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required