Home About Us Laboratory Services Forensic Science Communications Back Issues October 2000 Recovering and Examining Computer Forensic Evidence by...

Recovering and Examining Computer Forensic Evidence by Noblett et al.: Figure 1 (Forensic Science Communications, October 2000)

fsc_logo_top.jpg
fsc_logo_left.jpg

October 2000 - Volume 2 - Number 4

Recovering and Examining Computer Forensic Evidence

Figure 1

A Three-Level Hierarchical Model for Developing Guidelines for Computer Forensic Evidence

Hierarchical model for how to develop guidelines for computer evidence: principles of examination (few); organizational policy and practice (several); and procedures and techniques (many). Bulleted items expand on the three levels, which are illustrated by a triangle.

 


Back to the text