FORENSIC EXAMINATION WITH AUTOPSY FOR WINDOWS
Petter Anderson Lopes
Abstract: Because of the great technological advances and the dependence of companies and individuals regarding the equipment and information systems, crimes have also evolved and we started to use computerized equipment as a tool. Thus, the collection and analysis of digital evidence for both legal and commercial purposes, it requires a professional trained for such work, which is Forensic Analyst or Forensic Expert, or Expert Witness to court of law. The following study shows some procedures present in Computer Forensics Expertise cycle, preservation practices, collection, analysis and completion are elucidated in the text. Clarifications about the expert’s responsibilities, as well as some search tips are also covered, as well as free tools and some general aspects surrounding the subject.
Keywords: Computer Forensics. Analysis. Evidence. Forensics Examiner. Digital.
Due to major technological breakthrough and dependence of companies and individuals regarding the equipment and information systems, be them computers, mobile phones, GPS ‘s and the like, crimes have also evolved and we started to use computerized equipment as a tool. That way to survey and analysis of digital evidence both for legal or commercial purposes, requires a trained professional, which is the Forensic Analyst or Forensic Expert.
Forensic Computer is still a field relatively unexplored, consequently there are few qualified professionals and a lot of work to do. Several factors imply in the analysis or collection of evidence. For Garfinkel (2010) a major complicating to forensic computing are devices with large storage capacity, it suggests equipment with the same storage capacity to data transfer, and more time to the analyst collect and analyze.
To make a correct procedure of collection and analysis, aiming for excellence for report elaboration, is needed follow some rigorous and well-documented steps, the purpose of this study was explain some steps to examine evidences, during reading, will be possible to make a critical analysis about these topics.