Categories of Evidence in Computer Forensics

Begin Learning Cyber Security for FREE Now!

Already a Member Login Here

Categories of Evidence in Computer Forensics:

To be admissible in a court of law, the evidence must have relevance and be legally permissible, reliable, correctly identified, with its integrity preserved. The gathering, overseeing, and preservation of evidence are priority. The evidence gathered at a computer crime scene is usually intangible and susceptible to easy alteration without being traceable.

Because of this risk, evidence must be handled carefully and properly monitored throughout the evidence life cycle, which entails the evidence gathering and application process. This includes the discovery and recognition, protection, recording, collection, identification, preservation, transportation, presentation in a court of law, and the return of evidence to owner.

The gathering of evidence could can also include collecting all relevant storage media, obtaining an image of the hard disk before cutting power, taking and printing a screen shot, and avoiding degaussing equipment.

Preservation of evidence includes archiving and logging all information related to the computer crime until investigation procedures and legal proceedings are completed; safeguarding magnetic media from deletion, storing evidence in the appropriate environment both onsite and offsite, and defining, documenting, and following a strict methods for securing and accessing evidence both onsite and offsite.

Evidence gathered for a court of law falls into different categories, such as:

View Topics

Our Revolution

We believe Cyber Security training should accessible for everyone, everywhere. Everyone deserves the OPPORTUNITY to learn, begin and grow a career in this fascinating field. Therefore, Cybrary is the world's largest community where people, companies and training come together to give everyone the ability to collaborate in an open source way that is revolutionizing the cyber security educational experience.

We recommend always using caution when following any link

Are you sure you want to continue?