Blog entry by Ira P. Rothken on Moredata, May 13, 2007:

During the course of an electronic investigation you may be called upon to plan the forensic analysis of a target’s computer system and hard drive.The target hard drive may contain a range of data relevant to an investigation from emails making overt admissions to trace evidence of files that were “attempted” to be deleted that when “undeleted” may prove to be incriminating.

The general flow chart for a computer forensic investigation can be summarized with an acronym ISUPR and is as follows….

This entry was posted on Monday, May 14th, 2007 at 9:21 am and is filed under 2 - Identification, 3 - Preservation, 4 - Collection, 7 - Analysis, Blog entries, EDRM Stages. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.