Autori: Corina Dragomir

Editorial: Volumul Simpozionului International de Criminalistica, Editia a VII-a, Cluj Napoca, Romania, 2007, 2007.

Rezumat:

Electronic evidence often can provide vital information about the criminal activities. Electronic documents thought to be deleted or lost by the user often can be recovered. The background information available with electronic data can provide the footprint necessary to develop the facts of an internal investigation. Software forensic equipment and procedures are paramount to successful investigations of abuses involving computers. Using the right investigative tools can help maximize the effectiveness of forensics work and ensure that evidence is kept in good shape.
The most critical step in the computer forensic investigation is preserving the original evidence. If the original data is changed or compromised, then its value is greatly diminished. Computer evidence is very fragile and susceptible to damage from many sources so, the best way to preserve data files is to make cloned copies of the target computer’s hard drive and any other seized storage media.

Cuvinte cheie: urma electronica, criminalistica // electronic evidence, forensic science