Introduction to Handling and Examining Digital Evidence (1 Day)
Course Title: Introduction to Handling and Examining Digital Evidence
Duration: 8 Hours
The course provides an overview of the guidelines and correct methods for handling and examining Computer Evidence. This involves reviewing ‘best practice’ and ACPO (Association of Chief Police Officers) guidelines for forensic computer examination, and the common tools and techniques used.
The course also includes a brief insight into the examination of a computer system, focusing on the areas where evidence is commonly found.
Finally, case studies will be used to highlight the importance of following the correct procedures concerning the examination of computer-based evidence.
- Correct procedures for the seizure and handling of computer evidence
- Review of ACPO Guidelines for Computer Based Evidence
- Procedures that must be employed during the examination of computer based evidence
- The tools employed when dealing with computer evidence
- Case Studies showing the implications upon cases where correct procedures were not followed
Intended learning outcomes:
Upon completion of the course, students should have a fundamental understanding of how to observe correct procedures for handling and examining digital evidence, and an understanding of the implications of incorrect handling with regards to acceptability in a court of law.