Hard Drive Forensic Analysis
Sometimes there can be a sudden requirement to perform hard drive forensic examination. The goals of your forensic examination can be related to virtually any subject, since any type of case/action can take place. Sometimes many instances you may not always perform a full-scale investigation or “fishing expedition” when reviewing the contents of media; in other words, your forensic examination of media may include criteria that focuses and narrows your examination.
Weuse the “Objectives” section to outline all the tasks that our investigation intended to accomplish. Prior to any forensic analysis this task list should be discussed and approved by decision-makers, legal counsel, and/or the client.
The task list should also include the tasks
undertaken by the forensic examiner, the method by which the examiner undertook each task, and the status of each task at the completion of the report.