Michael Redmond, CFE

Don't Search That Computer!

• March 1, 2001

In a courtroom, the defense counsel often attacks the way evidence, including digital evidence, is collected and preserved and its chain of custody, rather than the actual analysis of the evidence. Errors in these areas can't be corrected at a later date and that's why the initial response to a computer-related offense should be handled like any other crime scene - with primary emphasis on securing and protecting potential evidence. The only difference is that - unlike a smoking gun at a crime scene - the majority of the evidence (floppy disk, etc.) will be latent and require forensic analysis.

Written By: Michael Redmond, CFE

• • Computers and Technology