2.0. Digital Investigation Foundation

This is an informative chapter. We will not focus on technical points.
  1. Digital Investigations and Evidence.
  2. Digital Crime Scene Investigation Process.
    1. System Preservation Phase
      1. Preservation Techniques
    2. Evidence Searching Phase
      1. Search Techniques
    3. Event Reconstruction Techniques
    4. General Guidelines
  3. Data Analysis
    1. Analysis Types
    2. Essential and Non-essential data
  4. Overview of Toolkit
    1. EnCase
    2. FTK
    3. ProDiscover
    4. SMART
    5. The Sleuth Kit / Autopsy

at

2.3.2 Essential & Non-essential data

  • 1.1.3.3 Types of Sector Addresses
    Physical address is address of the sector with respect to start of physical media. One way of addressing was to mentioning plate number , tr...
  • 1.1.2.1 CPU & Machine Codes
    CPU Central processing unit or processor. Can process assigned job. but cant create job for itself. OS assigns job to CPU. CPU picks up inst...
  • 1.1.1.3 Strings and Encoding
    How computer stores sentence ? Computer does not know characters and symbols. Computer has a unique numerical value for a symbol. Computer k...