The development of live forensic acquisition in general presents a remedy for some of the problems introduced by traditional forensic acquisition. However, this live forensic acquisition introduces a variety of additional problems, unique to this discipline. This paper presents current research with regards to the forensic soundness of evidence retrieved through live forensic acquisition. The research is based on work done for a PhD Computer Science at the University of Johannesburg
Reference:
Lessing, M and Von Solms, B. 2008. Live forensic acquisition as alternative to traditional forensic processes. IT Incident Management & IT Forensics (IMF 2008), Mannheim, Germany, 23 - 25 September, pp 1-9.
Lessing, M., & Von Solms, B. (2008). Live forensic acquisition as alternative to traditional forensic processes. http://hdl.handle.net/10204/3141
Lessing, M, and B Von Solms. "Live forensic acquisition as alternative to traditional forensic processes." (2008): http://hdl.handle.net/10204/3141
Lessing M, Von Solms B, Live forensic acquisition as alternative to traditional forensic processes; 2008. http://hdl.handle.net/10204/3141 .
