|
The digital forensic process is a recognised scientific and forensic process used in digital forensics investigations.〔〔 Forensics researcher Eoghan Casey defines it as a number of steps from the original incident alert through to reporting of findings.〔 The process is predominantly used in computer and mobile forensic investigations and consists of three steps: ''acquisition'', ''analysis'' and ''reporting''. Digital media seized for investigation is usually referred to as an "exhibit" in legal terminology. Investigators employ the scientific method to recover digital evidence to support or disprove a hypothesis, either for a court of law or in civil proceedings.〔 ==Personnel== The stages of the digital forensics process require differing specialist training and knowledge, there are two rough levels of personnel:〔 ;Digital forensic technician :Technicians may gather or process evidence at crime scenes, in the field of digital forensics training is needed on the correct handling of technology (for example to preserve the evidence). Technicians may be required to carry out "Live analysis" of evidence - various tools to simplify this procedure have been produced, most notably Microsoft's COFEE. ;Digital Evidence Examiners :Examiners specialise in one area of digital evidence; either at a broad level (i.e. computer or network forensics etc.) or as a sub-specialist (i.e. image analysis) 抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』 ■ウィキペディアで「Digital forensic process」の詳細全文を読む スポンサード リンク
|