Sicherung (Preservation) von Festplattendaten - Lehrstuhl für ...

Rootkit-Analogie [Carrier, p. 51]
• „To provide an analogy to the physical world, imagine
the police arriving at a crime scene where there are
several people and it is unknown whether any were
involved in the crime. A little while later, the police
are looking for a certain object, and they ask one of
these unknown people to go into one of the rooms
and look for the object. The person comes back to
the officer and says that he could not find the object,
but should the officer trust him? Maybe this person
was involved in the crime, and the object was in the
room, but he destroyed it when he was sent in to
look for it.“
Digitale Forensik, Schulung Bundespolizeiakademie, März 2009 Seite 27