6 results for " |forensics|"
A Method for Forensic Previews
Perhaps the most compelling reason to use a forensic preview method is that it helps to maintain the evidentiary value of a target machine. By using a repeatable, documented method, and by carefully noting all actions taken, the investigator can rati...
Adventures in Computer Forensics
What exactly do forensic analysts do? How can this type of work help law enforcement or corporate security managers? If you want to solve a puzzle, isn't it often best to have all the pieces? Computer forensics is one piece to the investigative p...
An Overview of Disk Imaging Tool in Computer Forensics
The objective of this paper is to educate users on disk imaging tool; issues that arise in using disk imaging, recommended solutions to these issues and examples of disk imaging tool.
A Case for Forensics Tools in Cross-Domain Data Transfers
Corporate and government organizations dependence on computers and networks for storage and movement of data raises significant security issues. Two of these are movement of data across security domains (cross-domain) and computer reuse. The cross-do...
Notes On Vista Forensics, Part Two
In part one of this series [ref 1] we looked at the different editions of Vista available and discussed the various encryption and backup features which might be of interest to forensic examiners. In this article we will look at the user and system f...
Notes On Vista Forensics, Part One
This article, the first in a two-part series, takes a high level look at what we know now about those changes in Vista which seem likely to have the most impact on computer forensic investigations, starting with the built-in encryption, backup, and s...
