Information Technology Reference
In-Depth Information
Figure 5.1 The.hunt.begins.
the.facts.on.which.a.court.will.depend.to.decide.if.evidence.
is.admissible.
A.big.part.of.that.nonrepudiation.or.integrity.of.electronic.
evidence.for.admissibility.is.often.based.on.time.stamps,.so.
we.look.at.how.time.stamps.work,.how.they.can.be.corrupted.
or. compromised,. and. how. they. can. be. used. for. or. against.
your. case. to. prove. the. eficacy,. integrity,. and. reliability. of.
your.data.
Finally,. we. lay. out. some. suggested. procedures. for. the.
gathering. of. the. relevant. electronic. data. in. a. way. that. the.
courts.will.respect.and.understand.as.forensically. sound..In.
other.words,.we.offer.you.tools.and.process.to.allow.you.to.
collect,.organize,.and.preserve.electronic.evidence.in.a.way.
that.you.can.ensure.no.alterations.were.made.to.the.data.and.
that. the. integrity. of. the. data. was. maintained. in. its. pristine.
and.original.state..Let's.get.started.
5.2 WHERE OH WHERE HAS
MY DATA GONE?
The.irst.thing.you.need.to.consider.when.you.begin.the.hunt.
for.relevant.data.is.the.big.question.of.where.is.it.hiding?.Like.
Search WWH ::




Custom Search