Computer Forensics: Issues in Preserving Digital Evidence and Forensic Investigation
– Technology is constantly changing, and as the capabilities change, so do the issues in Forensic information technology (FIT). FIT is defined as the scientific use or application of information technology (IT) that is used to generate and present digital evidence to be used in courts, legal or other formal proceedings (Volonio). While the use of technology helps get things done faster, it also can present many issues if the proper procedures and tools are not used and followed. An existing issue in FIT is computer forensics, in regards to preserving digital evidence and effectively conducting a computer forensics investigation….
How Technological Advancements Have Influenced Forensic Investigators
– … Lastly in “seizing stand-alone computers and equipment” first responders should take necessary steps like calling a forensic expert if the computer is still on or immediately plucking away the power to the computer if any destruction software is running which will help to preserve information on the machine (National Forensic Science Technology Center, n.d.). These are steps most trained investigators know. However the concern is to level the playing field with criminals. A recent NIJ needs-assessment study found that many senior managers, police chiefs, and those who make funding and resource allocation decisions do not have the level of expertise or tools needed to investigate and prep…
The Role of Federal Agencies in Fighting Digital Crime
– … Computer crimes would be treated as a serious offense instead of a misdemeanor because there are different terms for computer crimes that exist across jurisdictions on a local level. The lack of resources that local law enforcement agencies have when dealing with computer crimes won’t enable officers to use the extensive technical expertise and equipment resources in order to become an expert in the field as it is in a federal law enforcement agency. The U.S. developed new strategies within law enforcement agencies to work together in order to improve collaboration and cooperation to better protect the nation against digital crimes and terrorism….
– Data Acquisition Data acquisition is the process of copying data. For computer forensics, it’s the task of collecting digital evidence from electronic media. There are two types of data acquisition: static acquisitions and live acquisitions. Static Acquisitions: if you have preserved the original media, making a second static acquisition should produce the same results. The data on the original disk is not altered, no matter how many times an acquisition is done. Your goal when acquiring data for a static acquisition is to preserve the digital evidence….
Digital Evidence and Forensics
– … Those forensics researchers must develop new techniques for acquiring and analyzing data from the new devices that they encounter in their cases. Digital evidence is information stored or transited in digital form that may be used in court during an investigation. Different organizational entities have unique requirements for forensic results. WORK DONE IN THE PAST: The first computer crimes were recognized in the 1978 Florida Computer Crimes Act, which includes legislation against unauthorized modification or deletion of data on a computer system….