Computer Forensics and Digital Investigation with EnCase Forensic v7

CHAPTER

1

The Road to Readiness

Before embarking on the mission of performing digital investigations in-house (as opposed to having a third party perform them on an ad hoc or contract basis), there are a number of important steps that should be taken. The preparation is as important—if not more important—as the execution of the investigations. Cases handled without adequately defined methodologies, policies, and procedures have a higher risk of their evidence or methodology being challenged by the opposition in court. Digital forensics requires a high level of organization and attention to detail to ensure that mistakes are not made and evidence ...