From ForensicsWiki
Revision as of 15:23, 29 October 2005 by Jessek (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Although the methods for investigating computer forensics are limited only by an investigator's imagination, here are some guidelines on tried and true methodologies.

Data Reduction - By eliminating information that doesn't matter, an investigator is left with information that does matter.