Home About Us Laboratory Services Forensic Science Communications Back Issues October 2000 Recovering and Examining Computer Forensic Evidence by...
This is archived material from the Federal Bureau of Investigation (FBI) website. It may contain outdated information and links may no longer function.

Recovering and Examining Computer Forensic Evidence by Noblett et al.: Figure 1 (Forensic Science Communications, October 2000)


October 2000 - Volume 2 - Number 4

Recovering and Examining Computer Forensic Evidence

Figure 1

A Three-Level Hierarchical Model for Developing Guidelines for Computer Forensic Evidence

Hierarchical model for how to develop guidelines for computer evidence: principles of examination (few); organizational policy and practice (several); and procedures and techniques (many). Bulleted items expand on the three levels, which are illustrated by a triangle.


Back to the text