Internet Evidence Collection Methodology
“Collection, Preservation, and Presentation”: these are the significant factors identified by Todd Shipley, a highly experienced law enforcement investigator, in his article on internet evidence collection. Defensibility of the evidence in court will depend on the “defined, repeatable, and verifiable” approach investigators take when engaging the evidence. He begins by classifying “internet forensics” and isolating its aspects that prove somewhat problematic for investigators. The tools most often used by investigators for internet evidence collection are not designed for law enforcement and, therefore, do not retain much integrity in court. Shipley cites different sources of expertise including a landmark court case and a previously proposed methodology to come to his conclusion – collection must be verifiable, preservation must be in the original state, and presentation must simulate collection techniques.
For more details on this subject, click here.
Source: forensicmag.com
Citation:
Shipley, T. Collection of Evidence From the Internet: Part 1. In DFI News. Retrieved October 17, 2013, from http://www.dfinews.com/articles/2009/12/collection-evidence-internet-part-1#.Ul9iUmTBK6M.
[Abstract written by Alex Mitzel, ForensIQ Intern]
