Digital forensics basics
Cyber Security · Engineering
Study notes
Laptop seized: first photograph, then bit-for-bit image with write-blocker (hash proves integrity). Analyze copy: recover deleted files, browser history shows suspect visited bank at 2AM, logs reveal USB insertions. Report documents every step for court. Never analyze originals.