Chapter 15. Collecting and Preserving Digital Evidence
Topics we'll investigate in this chapter:
▪ Understanding the Role of Evidence in a Criminal Case
▪ Collecting Digital Evidence
▪ Preserving Digital Evidence
▪ Recovering Digital Evidence
▪ Documenting Evidence
▪ Computer Forensic Resources
▪ Understanding Legal Issues
Summary
Frequently Asked Questions
Introduction
In previous chapters, we discussed methods of detecting that cybercrimes have occurred and tracking down the person(s) responsible. The next and perhaps most important step in prosecuting the offender is to collect the evidence that will be used to build the case to be presented at trial.
The field of computer forensics involves identifying, extracting, documenting, and preserving information ...
Get Scene of the Cybercrime, 2nd Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
