Definition
What Constitutes Digital Evidence?
- Any information being subject to human intervention or not, that can be extracted from a computer.
- Must be in human-readable format or capable of being interpreted by a person with expertise in the subject.
Computer Forensics Examples
- Recovering thousands of deleted emails
- Performing investigation post employment termination
- Recovering evidence post formatting hard drive
- Performing investigation after multiple users had taken over the system
No comments:
Post a Comment