| <<< Digital Investigation | Index | Digital Crime Scene Process >>> |
If proper preservation procedures of the system being investigated are not followed,
you may accidentally modify data that otherwise could have been evidence
later in a court room you may be accused of destroying exculpatory evidence
Suspect system could delete all files on your system.
It could communicate with a remote system
| <<< Digital Investigation | Index | Digital Crime Scene Process >>> |