INDEX 147
historical background, 10
nature of, 14, 15
preservation of, 13, 14
Digital fingerprinting, 113
Digital Intelligence, 120
Digital Signal Line (DSL), 6
Digital versus analog, 17, 18, 21
Digital video disc (DVD) as storage unit, 16
Direct evidence, 128, 129
Discovery, 60–62
investigator’s qualifications, 56
production orders, 109
Disk architecture, 34
Disk drives, removal of, 31
Disk failure, 45
Disk fragmentation, 44
Disk imaging software, 33, 34
Disk Operating System (DOS), 6
Disk-write blocking programs, 33
.dll files, 111, 112
Documentary evidence, 129
Documentation. See also Record keeping;
Reports
photographs, 53, 54
supporting documents, inclusion in
report, 56
Draper, John (Captain Crunch), 68
Drive slack, 34
DriveSpy, 117
DSL (Digital Signal Line), 7
Dumpster diving, 80, 89, 90
DVD (digital video disc) as storage unit, 16
Dying declarations, 136
Dynamic linked library (.dll) files, 111, 112
E-mail
analysis tools, 40
anonymous, 96, 99
and cyberstalking, 102
and cyberterrorists, 70
and phishing, 93
and Trojan horses, 76, 77
wiretaps, 80, 81, 139, 140
eBay, 97
802.11 standard, 72, 73
Electronic Communications Privacy Act
(ECPA), 140
Email Examiner, 40
Embedded systems, 16
Employees
consumer information, misuse of, 94
disgruntled, 80, 82
monitoring, 142
theft, 83–85
Encase, 40, 43, 55, 111, 112, 117, 121
Encrypted File System (EFS), 114
Encryption, 47–49
and file ransom, 80
and system memory searches, 114
and wireless networks, 72, 73
Engressia, Joe, 67
Eudora, 81
Evaluation of case, 109, 110
Evidence
admissibility. See Admissibility of
evidence
best evidence rule, 26, 135
circumstantial, 128, 129
collection of, 30–37
destructive testing, 28, 29
direct, 128
evaluation of, 110–115
preservation of, 26–30
reliability, 26, 131, 132, 135, 136
types of, 129, 130
Excited utterance exception to hearsay
rule, 136
Execution files, 41
Executive summary, 55
Expert witnesses
communication skills, 64, 65
Daubert factors, 64, 131, 132
depositions, 61, 62
lay witnesses distinguished, 130
opinion testimony, 63, 64, 130
qualifications, 61, 64
roles of, 62–65
testimony, 61, 63–64, 130–132
Exploits, 7
Federal Bureau of Investigation (FBI),
Carnivore software, 80, 141, 142
Federal Rules of Evidence
investigator’s curricula vitae, 56
scientific evidence, admissibility of, 132
Federal Trade Commission (FTC), identity
theft complaints, 89
Fermi, Enrico, 4
Kommentare zu diesen Handbüchern