Cranfield University, College Rd, Cranfield, Wharley End, Bedford MK43 0AL, United Kingdom.
Sci Justice. 2023 Jan;63(1):116-126. doi: 10.1016/j.scijus.2022.11.004. Epub 2022 Nov 25.
Given the size and complexity of many digital forensic science device examinations, there is a need for practitioners to formally and strategically determine a course of conduct which allows them to undertake the most robust and efficient examination possible. This work outlines both the need for practitioners to have a digital evidence strategy (DES) when tackling any given examination scenario, how to construct one and the concerns which exist when no formal DES is in place. Approaches to DES development are examined and the context to which they should be deployed are analysed, with focus being on the use of DESs at the examination/processing stage of the investigative workflow. Finally, a 'DES skeleton' is offered to guide practitioners as they seek to create their own DES.
鉴于许多数字取证科学设备检查的规模和复杂性，从业者需要正式且策略性地确定一个行动方案，以便他们能够进行最强大和高效的检查。这项工作概述了从业者在处理任何给定的检查场景时都需要数字取证策略（DES），如何构建一个以及在没有正式 DES 时存在的问题。检查了 DES 开发的方法，并分析了它们应该部署的环境，重点是在调查工作流程的检查/处理阶段使用 DES。最后，提供了一个“DES 骨架”，以指导从业者创建自己的 DES。
