Chapter 1. System Forensics Fundamentals

NUMEROUS ELECTRONIC DEVICES are commonly used today. These devices include computers, global positioning system (GPS) receivers, personal digital assistants (PDAs), and mobile phones. Electronic devices record aspects of our lives and activities. An increasing number of conflicts and crimes exploit the data on these devices. Electronic evidence and information gathering have therefore become important issues. Collecting, preserving, analyzing, documenting, and presenting digital evidence are all facets of the field of system forensics.

System forensics can be studied several ways. For example, it can be studied by operating system, such as Windows, Macintosh, or UNIX. It can also be studied by the source ...

Get System Forensics, Investigation, and Response now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.