Chapter 1. System Forensics Fundamentals

NUMEROUS ELECTRONIC DEVICES are commonly used today. These devices include computers, global positioning system (GPS) receivers, personal digital assistants (PDAs), and mobile phones. Electronic devices record aspects of our lives and activities. An increasing number of conflicts and crimes exploit the data on these devices. Electronic evidence and information gathering have therefore become important issues. Collecting, preserving, analyzing, documenting, and presenting digital evidence are all facets of the field of system forensics.

System forensics can be studied several ways. For example, it can be studied by operating system, such as Windows, Macintosh, or UNIX. It can also be studied by the source ...

Get System Forensics, Investigation, and Response now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.