Title: Digital Forensics in the Twenty- First Century
Author: Gavin W. Manes
Source: The Forensic Examiner 16.4 (Winter 2007)
ABSTRACT:
Digital forensics experts are called on to collect and analyze digital information from electronic devices such as computer hard drives and cell phones. Electronic Evidence is used in a wide variety of cases, ranging from corporate espionage to employee separation or divorce. Recent changes to the Federal Rules of Civil Procedure have legitimized the use of digital evidence in court, making this new field of forensics more relevant than ever.
Three things I learned:
The digital forensic experts must be employed to carefully gather pertinent evidence when digital evidences or digital information will be used in the courses of an investigation or discovery process.
The production of digital documents during court proceedings is important to ensure all necessary information has been preserved.
Digital communications seen anonymous, but quite the opposite is true. Experts are able to investigate user activity through such applications as email, instant messaging, text messaging, and eve Internet telephone conversations.
Implications:
When information is deleted from a digital device, the file itself is not erased but rather, the computer’[s reference point for the file is erased. It is like removing a card from the library’s card catalog, but not taking the book off the shelf. The computer then marks the space containing the file as available. If a large amount of data is added to the drive, there is a chance that the “deleted” file can be overwritten. However, the use of very large hard drives in most current computers makes the chance of overwriting unlikely, and fragments of documents can often be found even a year after normal computer use.
Author: Gavin W. Manes
Source: The Forensic Examiner 16.4 (Winter 2007)
ABSTRACT:
Digital forensics experts are called on to collect and analyze digital information from electronic devices such as computer hard drives and cell phones. Electronic Evidence is used in a wide variety of cases, ranging from corporate espionage to employee separation or divorce. Recent changes to the Federal Rules of Civil Procedure have legitimized the use of digital evidence in court, making this new field of forensics more relevant than ever.
Three things I learned:
The digital forensic experts must be employed to carefully gather pertinent evidence when digital evidences or digital information will be used in the courses of an investigation or discovery process.
The production of digital documents during court proceedings is important to ensure all necessary information has been preserved.
Digital communications seen anonymous, but quite the opposite is true. Experts are able to investigate user activity through such applications as email, instant messaging, text messaging, and eve Internet telephone conversations.
Implications:
When information is deleted from a digital device, the file itself is not erased but rather, the computer’[s reference point for the file is erased. It is like removing a card from the library’s card catalog, but not taking the book off the shelf. The computer then marks the space containing the file as available. If a large amount of data is added to the drive, there is a chance that the “deleted” file can be overwritten. However, the use of very large hard drives in most current computers makes the chance of overwriting unlikely, and fragments of documents can often be found even a year after normal computer use.
It's great that digital forensics is already developing. I hope this goes on continuously as cyber crime makers utilize more and more sophisticated tools to do their thing.
ReplyDelete