Computer Evidence: Collection and Preservation, 2/e (Paperback)

As computers and data systems continue to evolve, they expand into every facet of our personal and business lives. Never before has our society been so information and technology driven. Because computers, data communications, and data storage devices have become ubiquitous, few crimes or civil disputes do not involve them in some way. This book teaches law enforcement, system administrators, information technology security professionals, legal professionals, and students of computer forensics how to identify, collect, and maintain digital artifacts to preserve their reliability for admission as evidence. It has been updated to take into account changes in federal rules of evidence and case law that directly address digital evidence, as well as to expand upon portable device collection.

隨著電腦和資料系統的不斷演進，它們已經擴展到我們個人和商業生活的方方面面。我們的社會從未像現在這樣受到資訊和科技的驅動。由於電腦、資料通訊和資料儲存設備已經無所不在，很少有犯罪或民事爭議不以某種方式涉及它們。本書教導執法人員、系統管理員、資訊技術安全專業人員、法律專業人員和電腦取證學生如何識別、收集和維護數位證據，以確保其可靠性以作為證據的依據。本書已根據聯邦證據規則和直接涉及數位證據的案例法的變化進行了更新，並擴展了對便攜式設備收集的內容。