2.2.4. General Guidelines

  • Preservation - Isolation - Correlation - logging
  • Preservation
    •  Copy important data to safe location.
    • # values for integrity
    • use of write blockers
    • decrease no of interactions with the evidence.
  •  Isolation
    • Isolate everything.
    • Simple html file may have harmful javascript code.
  • Correlate 
    • compare data with standard data to verification and standardization.
  • Logging
    • log everything.

2.3.2 Essential & Non-essential data