What if you want to preserve data that's on a computer's hard drive but you don't want to hire aa computer expert? Craig Ball, a trial lawyer and computer forensics special master, offers suggestions in Do-It-Yourself Forensics, Law Technology News, July 12, 2007:
I challenged myself to come up with forensically sound imaging methods for conventional IDE and SATA hard drives -- methods that would be inexpensive, use off-the-shelf and over-the-net tools, yet simple enough for nearly anyone who can safely open the case and remove the drive. In that vein, the safest way to forensically preserve evidence is to employ a qualified computer forensics expert to professionally 'image' the drive and authenticate the duplicate. No one is better equipped to prevent problems or resolve them should they arise.
No comments:
Post a Comment