Class Outline and Overview
Properties of the evidence
What is computer forensics all about
How do people use and abuse computer systems
What kind of evidence
- What does it look like
- What does it tell us
- Where and how do we get it
- When can we get it
- When does it go away
What are the limits
- How long does it last
- How valid is it
- admissibility
- accuracy
- timeliness