Duplication and Preservation of Digital Evidence
Digital Forensics

Duplication and Preservation of Digital Evidence

Project Name: Duplication and Preservation of Digital Evidence

Description: This blog will help all forensics investigator for Duplication and Preservation of Digital Evidence

Author: Rohit D Sadgune

Frequently Asked Question on Computer Forensics Investigation

  • Checklist of Duplication and Preservation of Digital Evidence

 

  1. Shut down the computer.
  2. Document the hardware configuration of the system.
  3. Transport the computer system to a secure location.
  4. Make bit-stream backups of hard disks and floppy disks.
  5. Mathematically authenticate data on all storage devices.
  6. Document the system date and time.
  7. Make a list of key search words.
  8. Evaluate the Windows swap file.
  9. Evaluate file slack.
  10. Evaluate unallocated space (erased files).
  11. Search files, file slack, and unallocated space for keywords.
  12. Document file names, dates, and times.
  13. Identify file, program, and storage anomalies.
  14. Evaluate program functionality.
  15. Document your findings.
  16. Retain copies of software used.
  17. Establish a solid relationship with local law enforcement, as they will be a valuable resource in the evidence collection process.

GO BACK TO COMPUTER FORENSICS CHECKLIST

No Comments

Leave a Reply

Your email address will not be published. Required fields are marked *

*

Cyber Threat Analytics
Digital Forensics
Reconstructing Past Digital Events

Reconstructing Past Digital Events Project Name: Reconstruction of Past Digital Events Description: This blog will help all forensics investigator to Reconstruct of Past Digital Events. Author: Rohit D Sadgune Frequently Asked Question on Computer Forensics Investigation How to Reconstructing Past Digital Event Backup of Digital Events Importanance of Reconstructing Past …

Computer Forensics Fundamentals
Digital Forensics
Computer Forensics Fundamentals

Computer Forensics Fundamentals Project Name: Computer Forensics Fundamentals Description: This blog will help all forensics investigator for Computer Forensics Fundamentals Author: Rohit D Sadgune Frequently Asked Question on Computer Forensics Investigation Checklist of Computer Forensics Fundamentals   Protect the suspected digital media during the forensic examination from any possible alteration, …

Principal Computer Forensic Activities Checklist Form
Digital Forensics
Digital Forensic Checklist

Digital Forensic Checklist Project Name: Digital Forensic Checklist Description: This blog will help all forensics investigator for Digital Forensic Checklist Author: Rohit D Sadgune Frequently Asked Question on Computer Forensics Investigation Checklist of Principal Digital Forensic Activities Checklist Form   Safely seize computer systems and files to avoid contamination and/or interference. …

%d bloggers like this: