Thursday 2 June 2011

How Computer Forensics Works ?


      Bit-stream copy
     Bit-by-bit copy of the original storage medium
     Exact copy of the original disk
     Different from a simple backup copy
     Backup software only copy known files
     Backup software cannot copy deleted files, e-mail messages or recover file fragments
     Bit-stream image
     File containing the bit-stream copy of all data on a disk or partition
Also known as forensic copy

Hi-tech Investigation Unit
hi-tech@orioninv.co.th
http://www.orioninv.co.th/th/s_hitech1.html

No comments:

Post a Comment