That smoking gun rarely presents itself on a serving leaf and in practice looks more like a needle in a haystack.<\/strong> In order to maximise the chances of finding the digital evidence, it is important to identify and secure potential data carriers as well as possible. This securing is preferably done by making a forensic copy by a specially trained forensic specialist.<\/strong> This specialist takes care of the correct preparation of the evidence, while continuously monitoring the integrity of the data, which benefits the usefulness in legal disputes or criminal cases.<\/p>\n The process of handling digital evidence is at its core quite simple:<\/p>\n However, this seemingly simple process has many pitfalls. In the coming weeks we will reflect on the TOP 3: Missed opportunities!<\/strong><\/p>\n As mentioned, we are surrounded by computers of all shapes and sizes and which can contribute more or less to the research. It’s not feasible to collect all this data. It is therefore necessary to be selective.<\/p>\n When the police see a mobile phone on the table during the search of a suspect’s home, we can add that it is confiscated and is involved in the investigation. Provided this can be of some relevance of course.<\/p>\n Otherwise, if there is no direct view of a phone, tablet, laptop on similar device. Too often in such studies we see that too much is relied on the investigators’ own perception or on the ‘blue eyes’ of the suspect who indicates that they do not have such devices. Are we going to settle for that old Nokia that pulls the suspect down a drawer?!<\/p>\n Through a digital triage, extracts can be obtained on the spot from the many digital sources, which can reveal the presence of digital sources, hitherto unknown.<\/p>\n Digital triage is the first investigative step of the forensic examination. The digital triage comes in two forms, live triage and post-mortem triage. The primary goal of the live triage is a rapid extraction of an intelligence from the potential sources.<\/p>\n Methods and Tools of Digital Triage in Forensic Context: Survey and Future Directions If in doubt, it makes sense to secure a little more digital data than seems relevant at first. In retrospect, the collection is not always possible because devices are taken away or data overwritten.<\/p>\n Summary; increases the likelihood of success of the study by identifying as many data sources as possible. A first digital triage provides insight, after which the collection of digital data can be started. Proportionate and hopefully inclusive <\/strong>smoking gun!<\/strong><\/p>\n <\/em>!<\/strong><\/p>\n Published: 05-03-2019, Remon Verkerk Computers, smartphones, IP camera, drones, cars, smart lighting and kettles; what do these objects have in common? They can potentially contain digital data that could contribute to a truth finding investigation. This evidence may be supportive…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-916","post","type-post","status-publish","format-standard","hentry","category-geen-categorie"],"yoast_head":"\n\n
1. Identification of data sources<\/h2>\n
\nVacius Jusas, Darius Birvinskas and Elvar Gahramanov<\/cite><\/p><\/blockquote>\n![\"\"](\"https:\/\/www.psgforensics.nl\/wp-content\/uploads\/2019\/03\/LOGO_PSG_FORENSICS_300px.png\"){kind=logo}
<\/figure>\n<\/div>\n","protected":false},"excerpt":{"rendered":"