Digital investigation is carried out in a virtual or digital environment. It may or may
not include a forensic analysis of systems, consisting of an actual physical analysis
of specific components (hard disk, mobile, PDA). In Digital Evidence Investigation
information is obtained from different sources such as the Internet, e-mail messages,
event registries etc.
Some of the facts which can be established by means of a Digital Evidence
Investigation are:
- The origin of an e-mail
- The location or time when the contents of certain web pages were published
- Determine the existence of any connections from or to a certain computer
- Identify the different elements that can be used to limit the connectivity of
any system.
|
|
