Give one example in which we may damage the evidence during the analysis process. Will this damage be defensible in a court? If not, what should we do?
Computer forensics is process of collecting, analyzing and preserving computer related data. In order for evidence to be admissible court of law, precautions have to be taken while collecting and analyzing evidence. Most law enforcement departments use a set of criterion when collecting evidence from a cyber crime. Firstly, there should be access to tools and equipment essential to document, disconnect, remove, package, and transport digital evidence. Secondly, arrangements should be made to obtain the equipment needed to collect forensic evidence. The most important thing is that actions taken to secure and collect computer forensic evidence should not alter the evidence (Infosecwriters.com, 2006).
In this context, damage to evidence is quite likely if precautions are not taken, quite similar to the care that has to be taken while ...
This solution examines the result of damage to evidence during analysis phase the fall out afterwards. It also takes into account the measures to be taken to prevent occurrence of such incidents in the future.