Title: Processing Crime and Incident Scenes
Course: CAP 2140 Digital Forensics > Section: Processing Crime and Incident Scenes

Introduction

This module examines rules of evidence in the United States. As a Forensics experts you should supplement your training by studying police science or US. Department of Justice (DOJ) procedures to understand "field of evidence" recovery tasks.

Objectives

At the end of this module the student will be able to:

- Explain the rules for digital evidence
- Describe how to collect evidence at private-sector incident scenes
- Explain guidelines for processing law enforcement crime scenes
- List the steps in preparing for an evidence search
- Describe how to secure a computer incident or crime scene
- Explain guidelines for seizing digital evidence at the scene
- List procedures for storing digital evidence
- Explain how to obtain a digital hash
- Review a case to identify requirements and plan your investigation

Readings and Resources

- Textbook: Chapter 5 pg. 149-190
- Searching and Seizing Computers and Obtaining Electronic Evidence in Criminal Investigations: http://www.justice.gov/criminal/cybercrime/docs/ssmanual2009.pdf
- Federal Rules of Evidence: http://en.wikipedia.org/wiki/Federal_Rules_of_Evidence