The Anatomy of a Digital Investigation

This chapter is from the book

Digital Archaeology: The Art and Science of Digital Forensics

Learn More Buy

This chapter is from the book

This chapter is from the book 

Digital Archaeology: The Art and Science of Digital Forensics

Learn More Buy

Chapter Exercises

1. Look up at least one criminal case that involved data carving. Was the technique useful for the prosecution or for the defense?
2. Think of as many ways as possible in which a civil case involving electronic discovery of specific e-mails would differ from a criminal cases in which a search of a suspect’s e-mail archives must be conducted. Don’t try to get too specific here, as this is simply an overview chapter.
3. Throughout the investigation, a myriad of actions are performed. At what point does the chain of custody begin, and how is it relevant at each subsequent stage?