Assignment - W4 Forensics Frameworks (Evaluation of a forensic report)

                Evaluation of a forensic report 

        Forensic findings subjects mainly focuses on examining evidence addition to answering

the needed through investigation. After extensive research, review and discussion, TG has

developed all following with understanding comprising the goals and objectives of forensic

studies: Scientific Research. Traces which are points left behind by past events or activities,

whether criminal or not. 

    The principle of leaving a line for a study originally came from Edmond

Locard also has been translated into brand new sentence involving all differentiation of evidence

and activities in the virtual environment. Monitoring is the transition to the next activity. This

does not mean that all forensics issues are related to the installation, just some modifications are

made for each machine. Even inconsistent things can be symbolic when the event that is the

subject of scientific research is the result of the event (for example, a cell phone was placed at

the crime scene or DNA was sent to the victim).

 

    All those processes are labeled as: 1) Recognition, 2) Validation, 3) Sorting, 4) Remodification, and 5) Evaluate and control. This work provides the following points: identification, preparation, classification, generational change, and search and integration of methods to solve test set problems in legal terms. Speaker identification: recording in analog or digital format, including comparing data with known speakers for forensic purposes, comparing recordings of speakers of unknown languages, counting speakers in recordings, and splitting recordings by speakers ("logging"). In addition, the principles designed to measure the performance of speaker recognising software has been established as a standard internationally approved (ISO/IEC 19795-1) applicable to all biometric and usage systems. 

    Face recognition: process images and videos with unknown faces for comparing with all face images in the available database or verification with wellknown persons. The face recognition method has been verified and proven by visual research. Photograph/Photo and its Analysis: Take photos and videos for forensic purposes. This includes classifying and identifying objects, such which are comparing all the objects in pictures or videos with all present known objects (for example, cars, shirts). This includes verification of images, the videos and other metadata analysis, NonProperty Analysis. 

    The work process includes photo and video development and restoration. The planning is important however is not possible to plan for every behavior. A source which provides knowledge with expertise provides experience which is always helpful. The number of forensic samples reflects the complexity the way computer science process works. US Department of Justice publishes judicial procedures. The model has been developed using technology. The model has four levels: addition; analysis; analysis and reporting.  

                                Framework to Evaluate a forensic report

    All the stages mentioned in the previous framework can be integrated into this framework. The framework also establishes a legal system. The reason is to have a clear understanding of the law at the beginning of the investigation and to provide information for each next step or next steps. By focusing on this ultimate goal and deciding which law to use, the best way to use it and all the steps will become clear. 

    The planning phase of the research should include: the standards used in the organisation;

• policies and procedures to facilitate investigations 
• education 
•  legal advice 
•  notify the authorities 
• information about past events
•  Good practice.

    The investigation will include: - 

• searching and examining computer evidence
• hide the evidence of computers (history is copied)
• transport the evidence to a safe place
• keep proof of location
• results to determine the importance and value of the evidence found)

    The final stage of the forensic investigation should also include the evidence stage. This stage is very important in terms of meeting the basic need defined by the word "forensic medicine". This period will include the following key steps:

• Referral for review 
• Grounds review.

However, it is important to remember that there are many levels of abstraction in this process. However, at each level two requirements are defined: the legality of the particular process and the documentation of every step taken.

                                                                References

- Casey, E.: Digital Evidence and Computer Crime, 2nd Edition, Elsevier Academic Press, 2004. 

- Reith, M., Carr, C., and Gunsch, G.: Analysis of Digital Forensics Models, International Journal of        Digital Evidence. Fall 2002 5

- http://www.askoxford.com/concise_oed/framework?view=uk : framework accessed on 7 June 2006.

 - Electronic Communications and Transactions (ECT) Txoj Cai No. 25 ntawm 2002. South Africa. 

- SH    Van Somers. thiab Loourens, CP.: A Framework for Digital Forensic Controls, IFIP 11.9, 2006.