- James Gill
- Research Papers
- Online Digital Evidence
Reproducibility of digital evidence in forensic investigations
We present a three-component model of a digital investigation which comprises: determination of input-output layers, assignment of reading and writes operations associated with the use of forensic tools, and time-stamping of reading and write operations. This builds on work of several authors, culminating in the new model presented here which is generic, scalable and compatible with all functions in the system, and which is guaranteed to produce a high quality of reproducibility...
- Hits: 633