Download Computer Forensics Discipline

Table of Contents
General Flow Diagram for Forensic Computer Examination ........................................... 1
General Flow Diagram Forensic Computer Crime Scene Response .............................. 2
Crime Scene / Field Response, Evidence Preservation Protocol .................................... 3
Target Drive Preparation Protocol ................................................................................... 5
Hard Drive Removal Protocol.......................................................................................... 6
Hard Drive Imaging Protocol ........................................................................................... 7
Cable Acquisition Protocol ............................................................................................ 11
Removable Media Imaging Protocol.............................................................................. 13
Evidence Search Protocol ........................................................................................... 15
Results .......................................................................................................................... 17
Approved Software for Forensic Computer Examinations............................................. 19
Glossary ........................................................................................................................ 21
References.................................................................................................................... 26
North Carolina State Bureau of Investigation
Crime Laboratory Division