In: Accounting
“U.S. Department of Justice Forensic Examination of Digital Evidence: A Guide for Law Enforcement”
Provide short and concise answers to the following questions:
What are some of the key considerations for an "on-site" examiner, also known as a "first responder"?
The digital forensic approach is a recognized scientific and
forensic approach utilized in digital forensics
investigations.Forensics researcher Eoghan Casey defines it as a
number of steps from the usual incident alert via to reporting of
findings.The system is predominantly utilized in pc and cellular
forensic investigations and contains three steps: acquisition,
analysis and reporting.
Digital media seized for investigation is most of the time referred
to as an "exhibit" in authorized terminology. Investigators employ
the scientific process to recuperate digital evidence to help or
disprove a hypothesis, either for a courtroom of legislation or in
civil lawsuits.[2]
Personnel
The stages of the digital forensics system require distinct
professional training and talents. There are two hard stages of
personnel:[3]
Digital forensic technician
Technicians collect or procedure proof at crime scenes. These
technicians are expert on the proper handling of technology (for
instance easy methods to keep the proof). Technicians is also
required to hold out "are living evaluation" of evidence. More than
a few tools to simplify this system had been produced, most
principally Microsoft's COFEE.
Digital evidence Examiners
Examiners specialize in one field of digital proof; either at a
vast level (i.E. Laptop or network forensics and so on.) or as a
sub-professional (i.E. Image analysis).