Tool Testing and Analytical Methodology (From Handbook of Computer Crime Investigation: Forensic Tools and Technology, P 115-132, 2002, Eoghan Casey, ed, -- See NCJ-195111)

• NCJ Number: 195116
• Author(s): Curt Bryson; Scott Stevens
• Editor(s): Eoghan Casey
• Date Published: 2002
• Length: 18 pages
• Sale Source: Academic Press, Inc
• Publication Format: Book (Softbound)
• Publication Type: Report (Technical)
• Language: English
• Country: United States of America

Annotation

This chapter underscores the importance of computer forensic examiners correctly and competently utilizing the forensic software tools available to them.

Abstract

The authors of this chapter explain that forensic software tools are only as good as their user. As such, this chapter focuses on providing computer forensic specialists with concepts that will help them make important decisions while they do their work. The authors also seek to help the computer forensic specialist identify the strengths and weaknesses of their tools. A main point of this chapter is that computer operating and file systems are constantly changing, thus one cannot come to depend too heavily on any one particular tool, as it may become obsolete in the not so distant future. The emphasis in computer forensic analysis should be on the skills of the examiner, not on the skills of any particular tool. This chapter focuses on the structure and requirements for computer forensic investigations, including collecting and preserving evidence, formulating leads, and data recovery. 2 Figures