- Any information being subject to human intervention or not, that can be extracted from a computer.
- Must be in human-readable format or capable of being interpreted by a person with expertise in the subject.
Locard's Exchange Principle
Locard's Exchange Principle states "Anyone or Anything entering a crime scene TAKES 'something' of the scene with them or LEAVES 'something' of themselves behind when they depart."
This 'something' is known as Digital Evidence in cases of cyber crime and fraud.
If an investigator finds :- ONE of the above, then he can suspect somebody
- BOTH of the above, then he can be sure
The use of digital evidence has increased in the past few decades as courts have allowed the use of e-mails, digital photographs, ATM transaction logs, word processing documents, instant message histories, files saved from accounting programs, spreadsheets, internet browser histories, databases, the contents of computer memory, computer backups, computer printouts, Global Positioning System tracks, logs from a hotel’s electronic door locks, and digital video or audio files.
Digital Evidence comes in numerous form factors, such as:
Download 108pages/2.96MB PDF presentation on Digital Evidence
No comments:
Post a Comment