chapter 1 computer forensics and investigations as a profession
chapter 1 computer forensics and investigations as a profession
chapter 1 computer forensics and investigations as a profession
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
A Brief History of Computer<br />
Forensics<br />
Early 1990s<br />
ExpertWitness for the Macintosh<br />
Recovers deleted files <strong>and</strong> fragments of deleted files<br />
Large hard disks posed problems for investigators<br />
Other software<br />
iLook<br />
AccessData Forensic Toolkit (FTK)<br />
Underst<strong>and</strong>ing C<strong>as</strong>e Law<br />
Technology is evolving at a rapid pace<br />
Chapter 1 37<br />
Existing laws <strong>and</strong> statutes are lagging the technology<br />
C<strong>as</strong>e (or judge-made) law used when specific<br />
statutes or regulations don’t exist<br />
C<strong>as</strong>e law allows courts to use previous c<strong>as</strong>es<br />
similar to the current one<br />
Because the laws don’t yet exist<br />
Each c<strong>as</strong>e is evaluated on its own merit <strong>and</strong><br />
issues<br />
Chapter 1 38<br />
Chapter 01 19