How should collections be performed?· All data collections should be performed in a forensically sound manner. This means that the collection should done using sound, defensible manner using industry accepted tools and procedures. The collection should produce an accurate representation of the source evidence.
With that said, there are targeted collection tools available that can provide far greater defensibility than simply copying data to a thumb drive. PinPoint Labs was one of the early proponents of this technology; Access Data Triage is one solution for creating a self-executing collection script on a thumb drive; Guidance EnCase Portable another; Microforensics Titan Collector is one option, as is Nuix Collector Portable.
Conclusion:In summary, we have highlighted how forensic collection has evolved and that new technology now permits ….
At the Frontier of forensic collection
At the Frontier ofForensic CollectionWhen is remote collectionright for you ?October 11, 2011