Computer Forensics - Forensic Process

Forensic Process

Computer forensic investigations usually follow the standard digital forensic process (acquisition, analysis and reporting). Investigations are performed on static data (i.e. acquired images) rather than "live" systems. This is a change from early forensic practices where a lack of specialist tools led to investigators commonly working on live data.

Read more about this topic:  Computer Forensics

Other articles related to "forensic process, forensic, forensics":

Digital Forensics - Forensic Process
... A digital forensic investigation commonly consists of 3 stages acquisition or imaging of exhibits, analysis, and reporting ... creating an exact sector level duplicate (or "forensic duplicate") of the media, often using a write blocking device to prevent modification of the original ... In 2006, forensics researcher Brian Carrie described an "intuitive procedure" in which obvious evidence is first identified and then "exhaustive searches are conducted to ...

Famous quotes containing the word process:

    It is part of the nature of consciousness, of how the mental apparatus works, that free reason is only a very occasional function of people’s “thinking” and that much of the process is made of reactions as standardized as those of the keys on a typewriter.
    John Dos Passos (1896–1970)