Defining a Process Model for Forensic Analysis of Digital Devices and Storage Media
Michael W. Andrew · 2007
There are three components of the overall digital forensic process defined by current industry standards; acquisition, preservation, and analysis. This paper explores defining a model for the analysis phase that will address legal and technical concerns surrounding the forensic analysis process