Computer Evidence: Collection and Preservation

As computers and data systems continue to evolve, they expand into every facet of ourpersonal and business lives. Never before has our society been so informationand technology driven. Because computers, data communications, and datastorage devices have become ubiquitous, few crimes or civil disputes do not involvethem in some way. This book teaches law enforcement, system administrators,information technology security professionals, legal professionals, and students ofcomputer forensics how to identify, collect, and maintain digital artifacts to preservetheir reliability for admission as evidence. It has been updated to take into accountchanges in federal rules of evidence and case law that directly address digital evidence,as well as to expand upon portable device collection.