Part 2: Evidence Acquisition

Part 2 will focus on the technical aspects of digital evidence acquisition. This will include a detailed examination of the tools and techniques that can be leveraged for proper evidence acquisition.

This part comprises the following chapters:

• Chapter 5, Collecting Network Evidence
• Chapter 6, Acquiring Host-Based Evidence
• Chapter 7, Remote Evidence Collection
• Chapter 8, Forensic Imaging