Global Forensics Inc., Essay Example

When collecting forensic evidence, after a cyber-attack, there are a number of legal constraints that need to be confronted.  First relates to that of confidentiality; there maybe numerous data files that are classified or highly confidential and the victim does not want the forensic investigation team to see these.  This may include both attacked files and those that already remain on the system.  This has to be carefully assessed but one approach has been to quarantine private areas.  Legal determination is often based upon existing case law and this can be problematic in new types of cyber-crime. This often brings into play the need for Expert witnesses or subject matter experts to assist the judge in legal interpretation of events. (Burmester, M. 2004)

In the acquisition of evidence in computer forensics it often includes gaining of access to the victims hard drive.  In addition screen captures and details of system configuration files.  Very often the forensic evidence is extracted from the duplicate backup system as opposed to the actual compromised system.  The objective being to prevent any tampering on the already compromised system and corrupt the integrity of any evidence.  Investigators can use the IP data trail to discover the ESI.  (Bui, 2003)

The data mapping process commences with getting a list of all the systems that are used by the Company. This includes a complete communications mapping of virtual servers, existing servers, networks, databases, external interfaces etc.  Then obtain an inventory of the business processes ensuring that all of the ESI is fully documented.  It will be necessary to collect a list of all users and their access privileges. Collect all systems documentation including Data Models, Work flow charts, business process charts.   This information is then embodied into a Forensics report   The digital evidence  then provides the requisite facts describing the events leading up to a computer related incident.   (AIIM, 2009)

References

AIIM. (2009). Data Mapping. Infonomics, 1-5.

Bui, S. E. (2003). Issues in Computer Forensics. COEN.

Burmester, M. K. (2004). Tracking cyberstalkers: a cryptographic approach. Tallashee Fl: Florida State University.