Computer Evidence - Collection & Preservation

Another excellent reference and learning guide is Computer Evidence, Collection & Preservation by Christopher L.T. Brown.

The book focuses on the collection and preservation of digital evidence because these two phases of computer forensics investigations are the most critical to evidence acceptance.

A good understanding of evidence dynamics is required because shutting down a computer changes the state of the computer as well as many of its files, so a good understanding of evidence dynamics is essential when undertaking a computer forensic investigation.

By reading and using this task oriented guide, computer forensic investigators will be able to ensure case integrity during the most crucial phases of the computer forensics investigations process.

Please visit the website link below for more information about this excellent resource.

Computer Evidence - Collection & Preservation

PJL 18th January 2010