Thursday, 2 June 2011

How Computer Forensics Works ?


•      Bit-stream copy
–     Bit-by-bit copy of the original storage medium
–     Exact copy of the original disk
–     Different from a simple backup copy
•     Backup software only copy known files
•     Backup software cannot copy deleted files, e-mail messages or recover file fragments
•     Bit-stream image
–     File containing the bit-stream copy of all data on a disk or partition
Also known as forensic copy

Hi-tech Investigation Unit
hi-tech@orioninv.co.th
http://www.orioninv.co.th/th/s_hitech1.html

No comments:

Post a Comment