The candidate's research investigated the development of a model for Live Forensic Acquisition - Liforac. The Liforac model is a wide-ranging model that presents many of the most important aspects related to Live Forensic Acquisition, suggesting ways in which such an acquisition should take place to ensure forensic soundness. The study presents information on a relatively new field of expertise and considers the Digital Forensic discipline, forensic tools, practical problems experienced during acquisition, legal aspects and cyber crimes. It also looks at technology advances that eradicate the use of Dead Forensic Acquisition and promote the use of Live Forensic Acquisition. The study finally presents a comprehensive model for forensically sound Live Forensic Acquisition. This model is composed of four distinct dimensions (Laws and Regulations, Timeline, Knowledge and Scope) that look at the details of ensuring forensically sound digital evidence. At the time of writing, the Liforac model is the first document of this nature that could be found for analysis. It serves as a foundation for future models that can refine the current proposed processes.
Reference:
Grobler, MM. 2009. Liforac - A Model For Live Forensic Acquisition. University of Johannesburg
Grobler, M. (2009). Liforac - A Model For Live Forensic Acquisition (Workflow;4263). University of Johannesburg. Retrieved from http://hdl.handle.net/10204/5809
Grobler, MM Liforac - A Model For Live Forensic Acquisition. Workflow;4263. University of Johannesburg, 2009. http://hdl.handle.net/10204/5809
Grobler M. Liforac - A Model For Live Forensic Acquisition. 2009 [cited yyyy month dd]. Available from: http://hdl.handle.net/10204/5809
Submitted in fulfilment of the requirements
for the degree Philosophiae Doctor in Computer Science, in the Faculty of Science
at the University of Johannesburg. This is an ABSTRACT ONLY