Horsman Graeme
Teesside University, Middlesbrough, UK.
J Forensic Sci. 2022 May;67(3):1215-1220. doi: 10.1111/1556-4029.14979. Epub 2022 Jan 7.
Data acquisition is a fundamental stage of the digital forensic workflow, where without it, it may not be possible to conduct many criminal inquiries effectively. While any investigative team may want access to all digital data available, it is no longer an approach that is considered justifiable or proportionate in all cases. There is now an increasing narrative highlighting the invasiveness of digital data acquisition processes and their impact upon privacy, with calls to ensure greater scrutiny is placed upon their use. This work proposes the "Order of Data Acquisition" which defines 10 digital data acquisition methods that are available to practitioners as a part of a forensic examination, derived from a review of existing literature and best practice acquisition approaches, and arranged by their "invasiveness." Each method is discussed with examples provided in order to clarify and formalize the process of determining a suitable acquisition method in every case while acknowledging privacy invasion concerns. Finally, conclusions are drawn.
数据采集是数字取证工作流程的一个基本阶段，没有它，可能就无法有效地进行许多刑事调查。虽然任何调查团队可能都希望获取所有可用的数字数据，但在所有情况下，这种做法已不再被认为是合理或适度的。现在，越来越多的说法强调数字数据采集过程的侵入性及其对隐私的影响，呼吁确保对其使用进行更严格的审查。这项工作提出了 “数据采集顺序”，它定义了10种数字数据采集方法，这些方法可供从业者在法医检查中使用，这些方法源自对现有文献和最佳实践采集方法的审查，并按其 “侵入性” 进行排列。每种方法都结合示例进行了讨论，以便在承认隐私侵犯问题的同时，阐明并规范在每种情况下确定合适采集方法的过程。最后得出了结论。
