Practioner's Guide to Gathering Electronic Forensic Evidence

Dedicated to evidence gathering in the PC environment, this title provides the reader with an understanding of the various forms of information that can be used in a court of law as evidence. The text looks at approaches to identifying and gathering evidence and some of the tools needed to accomplish this.

---

Practitioner's Guide to Gathering Electronic Forensic Evidence is dedicated to evidence gathering in the PC environment and provides the reader with an understanding of the various forms of information can be used in a court of law as evidence. The book looks at approaches to identifying and gathering evidence and some of the tools needed to accomplish this. The authors describe in detail exactly where the data is stored and how PC operating systems deal with reading and writing to disk. They also discuss other locations where information may be stored purposely to avoid discovery as well as methods and tools for browsing those locations and making copies of relevant data that may be found there.