Difference between revisions of "Techniques"

From ForensicsWiki
Jump to: navigation, search
m
(Locard's exchange principle.)
Line 4: Line 4:
  
 
* [[Data Reduction]] - By eliminating information that doesn't matter, an investigator is left with information that does matter.
 
* [[Data Reduction]] - By eliminating information that doesn't matter, an investigator is left with information that does matter.
 +
* [[Locard's exchange principle]]

Revision as of 15:00, 30 March 2006

Although the techniques for investigating computer forensics are limited only by an investigator's imagination, here are some guidelines on tried and true methodologies.

Techniques