ABSTRACT
Chapter Objectives Learn the functions that occur in a computer forensics lab Understand the techniques required to image a hard drive Identify a process for deciding what evidence to collect Look at the steps required to successfully process latent electronic evidence Understand the importance of the chain-of-custody and documentation
Introduction The function of a computer forensics lab is to provide technical support in the detection, preservation, recovery, examination, and reporting of electronic and computer-related latent evidence.
