Forensics and Law Enforcement

From Just Solve the File Format Problem
(Difference between revisions)
Jump to: navigation, search
(Links)
Line 15: Line 15:
 
== Links ==
 
== Links ==
 
* [https://archive.org/details/ShmooCon2014_You_Dont_Have_the_Evidence ShmooCon 2014 - You Don't Have the Evidence (January 2014) (video)]
 
* [https://archive.org/details/ShmooCon2014_You_Dont_Have_the_Evidence ShmooCon 2014 - You Don't Have the Evidence (January 2014) (video)]
 +
* [[The Sleuth Kit and Autopsy]] can read raw, Expert Witness, and AFF formats

Revision as of 12:39, 8 July 2014

File Format
Name Forensics and Law Enforcement
Ontology

{{{caption}}}

In the course of investigations, detectives sometimes need to preserve digital information. These are formats used in this process. See also Disk Image Formats. In contrast to those raw disk images, forensic formats also store various metadata as well as hash tables to track the origin of data and ensure it is not altered after the fact.

See also Law

Links

Personal tools
Namespaces

Variants
Actions
Navigation
Toolbox