Research on capture of live digital evidence

With the of development of internet, more and more criminals commit the crime via utilizing the information technology, which has aroused the forensic scientists’ interests simultaneously. And the concept of digital evidence has been brought to society consequently. Due to the feature of digital evidence such as easy-loss or unstable, how to implement capture of live system is critical to the forensic technicians and other related staff. This paper analyzes the correct procedures of on-site acquisition concretely, including planning, sceneprotection, collection, preservation, packaging, transportation, and storage.

Download PDF