Torpedo Betty Blog
The Blogging Universe with Torpedo Betty
Electronic Computer TRaining and Forensics
April 30th, 2008 by admin
Electronic evidence can be gathered from different sources. An example of this is the company’s work. The analyst can gather the information in three parts. First at the suspect’s workstation, second on the server he accessed and lastly at the network which connects the two.
In learning the procedures for these processes, the analyst will train using several MCSE tutorials at their disposal to ensure they are up to speed as quickly as possible.
Like any other piece of evidence the information gathered must be handled carefully. It also must follow the standards of admissible evidence so that it will be accepted in court. The analyst can only use methods and tools that has been tested and evaluated to make sure that they reliable and accurate. Tools can be verified by the Defense Cyber Crime Institute at no cost.
The original evidence must be handled as little as possible so that the data will not be modified. Electronic data can be easily changed compared to physical evidences. Analysts must also be cautious of viruses, damages and traps.
After the evidence has been analyzed the analyst establishes and maintains the chain of custody. The evidence will then be stored in its proper place. After the examination has been finished the analyst documents his or her reports and findings. This also includes everything that he has done so far in his investigation. The analyst has to keep in mind that they should exceed beyond their knowledge approach the investigation without bias.
If the original evidence had somehow been damaged or changed, it will not be admissible in court anymore. In this case the analyst must consider what time operations were inconvenienced. Apart from that the analyst should also consider how the sensitive information will be handled that was discovered unintentionally.
Analysts must also be careful in handling digital evidence from an owner that has not given any consent for the investigation. This happens in most cases. Apart from the evidence being inadmissible in court the analyst can also be sued.
