I challenged myself to come up with forensically sound imaging methods for conventional IDE and SATA hard drives -- methods that would be inexpensive, use off-the-shelf and over-the-net tools, yet simple enough for nearly anyone who can safely open the case and remove the drive. In that vein, the safest way to forensically preserve evidence is to employ a qualified computer forensics expert to professionally 'image' the drive and authenticate the duplicate. No one is better equipped to prevent problems or resolve them should they arise.
From 2005 to 2015 this blog presented news items and resources relating to trial advocacy and the legal system, with a focus on Washington State. It was developed to support the Trial Advocacy Program at the University of Washington School of Law, but broadened to include appellate practice, the courts, access to justice, and related topics. It is no longer active.
Tuesday, August 21, 2007
How to Preserve Computer Data
What if you want to preserve data that's on a computer's hard drive but you don't want to hire aa computer expert? Craig Ball, a trial lawyer and computer forensics special master, offers suggestions in Do-It-Yourself Forensics, Law Technology News, July 12, 2007:
No comments:
Post a Comment