Abstract
Computer Forensics is essential for the successful prosecution of
computer criminals. For a forensic investigation to be performed
successfully there are a number of important steps that have to be
considered and taken. The aim of this paper is to define a clear,
step-by-step framework for the collection of evidence suitable for
presentation in a court of law. Existing forensic models will be
surveyed and then adapted to create a specific application framework for
single computer, entry point forensics.
By : Michael Kohn, JHP Eloff and MS Olivier
Download Link :
