Forensics and Law Enforcement

From Just Solve the File Format Problem
(Difference between revisions)
Jump to: navigation, search
(Links)
(Fingerprint data)
(6 intermediate revisions by 2 users not shown)
Line 4: Line 4:
 
|image=All Detective Magazine February 1934.jpg
 
|image=All Detective Magazine February 1934.jpg
 
}}
 
}}
 +
 +
See also [[Law]]
 +
 +
== Forensic images of disks and computer network data ==
  
 
In the course of investigations, detectives sometimes need to preserve digital information. These are formats used in this process. See also [[Disk Image Formats]]. In contrast to those raw disk images, forensic formats also store various metadata as well as hash tables to track the origin of data and ensure it is not altered after the fact.
 
In the course of investigations, detectives sometimes need to preserve digital information. These are formats used in this process. See also [[Disk Image Formats]]. In contrast to those raw disk images, forensic formats also store various metadata as well as hash tables to track the origin of data and ensure it is not altered after the fact.
Line 11: Line 15:
 
* [[EnCase hash map]] (Expert Witness)
 
* [[EnCase hash map]] (Expert Witness)
  
See also [[Law]]
+
== Fingerprint data ==
 +
See also [[Fingerprints]]
 +
 
 +
* [[ANSI 378]] (used to store minutae of fingerprints)
 +
* [[ANSI 381]] (used to store images of fingerprints)
 +
* [[ISO 19794-2]] (used to store minutae of fingerprints)
 +
* [[NIST IHead]] (one of its uses is storing fingerprint images)
 +
* [[WSQ]] (used to store images of fingerprints)
  
 
== Links ==
 
== Links ==
 
* [https://archive.org/details/ShmooCon2014_You_Dont_Have_the_Evidence ShmooCon 2014 - You Don't Have the Evidence (January 2014) (video)]
 
* [https://archive.org/details/ShmooCon2014_You_Dont_Have_the_Evidence ShmooCon 2014 - You Don't Have the Evidence (January 2014) (video)]
 
* [[The Sleuth Kit and Autopsy]] can read raw, Expert Witness, and AFF formats
 
* [[The Sleuth Kit and Autopsy]] can read raw, Expert Witness, and AFF formats
 +
* [http://qanda.digipres.org/132/best-choice-for-digital-preservationists-who-create-images?show=157 Is AFF the best choice for digital preservationists who create images?]

Revision as of 02:04, 3 June 2020

File Format
Name Forensics and Law Enforcement
Ontology

{{{caption}}}

See also Law

Forensic images of disks and computer network data

In the course of investigations, detectives sometimes need to preserve digital information. These are formats used in this process. See also Disk Image Formats. In contrast to those raw disk images, forensic formats also store various metadata as well as hash tables to track the origin of data and ensure it is not altered after the fact.

Fingerprint data

See also Fingerprints

  • ANSI 378 (used to store minutae of fingerprints)
  • ANSI 381 (used to store images of fingerprints)
  • ISO 19794-2 (used to store minutae of fingerprints)
  • NIST IHead (one of its uses is storing fingerprint images)
  • WSQ (used to store images of fingerprints)

Links

Personal tools
Namespaces

Variants
Actions
Navigation
Toolbox