Retrieving digital evidence: methods, techniques and issues

In this article, we’ll talk strictly about the digital evidence available on the PC or, more precisely, on the computer’s hard drive and live memory dumps. This leaves the entire domain of mobile forensics aside, for a good reason: mobile forensics has its own techniques, approaches, methods, and issues...

Download PDF