ABSTRACT

In the United States the Department of Justice (DoJ) produced a guide for law enforcement agencies on the forensic examination of digital evidence, which includes recommended actions at a digital crime scene. The Federal Rules of Evidence in the US apply to digital evidence in the same way as to more traditional forms of evidence. In 2002 the International Organization on Computer Evidence (IOCE) working in consultation with the G8 nations produced their own digital forensics guidelines. The types of digital evidence that first responders are likely to encounter are very varied, and any location or device with the capability for storage or communication of digital data will be of interest. Locations include digital storage media used in PCs, Macs, tablet computers, memory cards, USB pen drives, optical and magneto optical disks, smartphones and mobile phones, Personal Digital Assistants (PDAs), games consoles, mobile navigation systems, photocopiers and fax machines, digital video cameras and networks.