| <<< | Index | competent forensic examination -- integrity of the original media >>> |
What are three essential requirements for a competent forensic examination?
First -- Forensically sterile examination media.
Computer forensics exams are generally not performed on the original evidentiary media.
The evidence is forensically copied to some form of examination media.
Since examination media may be reused from one case to another, it is imperative that the examination media be totally wiped free of information from a previous case.
| <<< | Index | competent forensic examination -- integrity of the original media >>> |