advanced digital forensics.pdf

7/21/2019 ADVANCED DIGITAL FORENSICS.pdf

1/12

KG[604-3 NDSNLK@D DGMGTNI

CEZ@L[GK[GLT@ZL@T Z@MPINTGEL[ NLD @LCEZK@A@LT

JW

BNKH-0


2/12

KELT@LT[

GLTZEDPKTGEL

G[[P@[ EL GLT@ZL@T Z@MPINTGEL[

NVVIGKNJI@ IN][ TE TB@ MGS@L

KN[@

@LCEZK@NJI@ IN][ NLD Z@I@SNLT

KELSGKTGEL[

T@[TGAELW VZEK@DPZ@

KELKIP[GEL


3/12

GLTZEDPKTGEL

[`v`rni inws el keaput`r-rìnt`d ecc`lk`s `xgst gldgcc`r`lt stnt`s nld lntgels ec tb` werid.

Aest ec tb`s` inws bnv` j``l nppig`d te kns`s rìnt`dte kyj`r krga`s keaagtt`d jy gldgvgdunis gl dgcc`r`ltr`mgels ec tb` werid, wbgkb bnv` i`d te pres`kutgels

nld kelvgktgels. [ea` ec sukb inws glkiud` tb` Dntn Vret`ktgel Nkt, tb`

Keaput`r Agsus` Nkt, tb` Z`muintgel ec Glv`stgmnteryVew`r Nkts (ZGVN) `tk

Tb` kns` ec Kesae glveiv`s bnkhglm nld ulnutbergs`dnkk`ss te kinssgcg`d glcerantgel.

Tbgs vgeint`s n luaj`r ec keaput`r-rìnt`d inws nld nssukb tb` us` ec keaput`r inw te nppreprgnt` ecc`lk`snld pulgsba`lts gl tb` mgv`l sk`lnrge gs cgt cer

purpes`.


4/12

G[[P@[ EL GLT@ZL@T

Z@MPINTGEL[ Glt`rl`t knllet j` r`muint`d wgtbeut n ulgcg`d

glt`rlntgelni inw drnct`d, rntgcg`d nld sgml`d jy niiaàj`r stnt`s.

Gldgvgduni stnt` inws nmnglst Glt`rl`t krga`s nr`let meed `leumb j`knus` tb` prejià ec

Glt`rl`t krga` gs n miejni el`. Tb`r` nr` r`muintgels sukb ns Keaput`r Agsus`

Nkt :666 jut sukb r`muintgel gs prnktgkniiygapessgji` te `lcerk` wb`l n kgtgz`l ec nletb`r

keultry knrrg`s eut nl Glt`rl`t rìnt`d krga`nmnglst tb` PH ns tb`r` gs le ulgcg`d Glt`rlntgelniinw te pres`kut` tb` nii`m`d ecc`ld`r nld bgsbea` Mev`rla`lt gs let uld`r nly Glt`rlntgelni

ejigmntgels te bnld bga er b`r ev`r te tb` PH tecnk` kbnrm`s.


5/12

G[[P@[ EL GLT@ZL@T

Z@MPINTGEL[ (KELTD.)

Tb` prejià ec Glt`rl`t r`muintgels me`s j`yeldulgcg`d Glt`rlntgelni inws, tb` inw wgii strummi` te kntkbup wgtb tb` t`kbleiemy gtsìc.

Inws de let m`t updnt`d ns cnst ns l`w t`kbleiemy m`tglv`lt`d, nise nl nttàpt jy tb` Glt`rlntgelni

keaaulgty te kea` up wgtb rejust/strgkt inws wgii`lkrenkb el pèpi`sbuanl rgmbts.

Igh` tb` kns` ec Mnry Akhgllel, d`spgt` tb` cnkt tbntb` wns ceuld mugity ec jr`nhglm glte n P[ keaput`r, bgs`xtrndgtgel te Plgt`d [tnt` te cnk` kbnrm`s wnsjiekh`d j`knus` gt wgii jr`nkb bgs buanl rgmbts.

Tb`r` nr` agiigels ec r`nsels wby Glt`rl`t sbeuid j`r`muint`d jut tb` jntti` te kea` up wgtb n ulgcg`d nldjninlk`d inw wgii ràngl nl el meglm prejià.


6/12

NVVIGKNJI@ IN][ TE TB@ MGS@L KN[@ Tb` krga` keaagtt`d gl tbgs sk`lnrge vgeint`s tb` ceiiewglm

keaput`r inws nld s`v`rni etb`rs?

ZGVN :666. ZGVN :666 keltreis tb` ulinwcui nld ulnutbergs`dglt`rk`ptgel ec keaaulgkntgels el pujigk nld prgvnt`tì`keaaulgkntgel systàs (Vnrt >, Kbnpt`r >) ((KEPLKGI,:662)).

Keaput`r Agsus` Nkt >776? Tb` krga` jy Kesae vgeint`s [`ktgels>(ulnutbergs`d nkk`ss te keaput`r ant`rgni), :(glt`lt te keaagt

curtb`r ecc`lk`s el ulnutbergs`d nkk`ss) nld ;(aedgcyglmkeaput`r ant`rgni el ulnutbergs`d nkk`ss) ec tbgs inw.

Veigk` nld Oustgk` Nkt :663? Vnrt 0 ec tbgs Nkt [`ktgels ;0(ulnutbergs`d nkk`ss te keaput`r ant`rgni) nld ;3 (ulnutbergs`dnkt wgtb glt`lt te gapngr ep`rntgel ec keaput`r), wbgkb gs nlna`lda`lt ec tb` Keaput`r Agsus` Nkt >776.

Keaput`r Crnud nld Njus` Nkt, Tgti` >2, Krga`s nld KrgaglniVrek`dur`, Vnrt >, Kbnpt`r 4= nld [`ktgel >6;6 el Crnud nldrìnt`d nktgvgty gl kell`ktgel wgtb keaput`rs.

@i`ktrelgk Keaaulgkntgels Vrgvnky Nkt (@KVN)? Tbgs Nkt keltnglsprevgsgels, wbgkb pret`kts tb` wgr` nld ì`ktrelgk keaaulgkntgels

ec n p`rsel crea glt`rk`ptgel jy nletb`r p`rsel


7/12

@LCEZK@NJI@ IN][ NLD

Z@I@SNLT KELSGKTGEL[ Keaput`r Crnud nld Agsus` Nkt? tbgs inw stgpuint`s tbnt gt

gs n C`d`rni Krga` gl tb` Plgt`d [tnt`s ec Na`rgkn te bnv`ulnutbergs`d nkk`ss te kinssgcg`d er cglnlkgni glcerantgel((I`mni Glcerantgel Glstgtut`, :6>:)).

Tb` pulgsba`lt cer nl ecc`lk` keaagtt`d uld`r tbgs inwrnlm` crea n cgl` te s`v`rni y`nrs ec gaprgsela`lt jut let`xk``dglm tw`lty (:6) y`nrs d`p`ldglm el tb` s`v`rgty ectb` ecc`lk`.

@i`ktrelgk Keaaulgkntgels Vrgvnky Nkt (@KVN)? tbgs Nkt

keltngls prevgsgels, wbgkb pret`kts tb` wgr` nld `i`ktrelgkkeaaulgkntgels ec n p`rsel crea glt`rk`ptgel jy nletb`rp`rsel ((@i`ktrelgk Vrgvnky Glcerantgel K`lt`r, :6>>)), tb`pulgsba`lt cer wbgkb gs up te cgv` y`nrs gl ongi wgtb n cgl` ectwe buldr`d nld cgcty tbeusnld Plgt`d [tnt`s deiinrs($:06, 666)


8/12

T@[TGAELW VZEK@DPZ@

Cgrst ec nii, tb`r` wgii j` tb` l``d te `lsur` tbnttb` kns` gs glv`stgmnt`d jy nl nutbergs`dp`rsel(s).

V`ragssgel te bnv` nkk`ss te tb` l`twerh er

werhstntgel wbes` s`kurgty bns j``l jr`nkb`dsbeuid j` mgv`l jy tb` Dgr`kter ec GlcerantgelT`kbleiemy d`pnrta`lt ns wìi ns tb` Dgr`kter ecCglnlk` ec tb` ermnlgsntgel glveiv`d.

@vgd`lk` njeut tb` kns` wgii bnv` te j` mntb`r`dgl nkkerdnlk` wgtb tb` Nssekgntgel ec Kbg`c VeigkÈccgk`rs (NKVE) Mugdìgl`s (]gihglsel, :6>6).


9/12

T@[TGAELW VZEK@DPZ@ (KELTD.)

@lsur` tbnt tb` dntn bìd el tb` werhstntgel(s) er sternm`

a`dgn tbnt any j` us`d gl keurt gs let nit`r`d jy tb`glv`stgmntglm pnrty, wbgkb any j` n inw `lcerkà`lt nm`lky.

Tbgs a`nls tbnt tb` werhstntgel(s) aust j` s`kur`d nld

gseint`d crea tb` l`twerh te `lsur` tbnt le nkk`ss er

curtb`r kbnlm`s nr` and` el tb` dntn ster`d er tb`prek`ss`s tbnt rul el gt ns wìi ns nppigkntgels sukb ns w`j

jrews`rs jy nl ulnutbergs`d p`rsel(s).

Nl ganm` ec tb` sternm` d`vgk`s nttnkb`d te tb`

werhstntgel(s) (sukb ns tb` bnrd dgsh, P[J stgkhs, `tk)sbeuid j` tnh`l nld us`d te nlniys` tb` `vgd`lk` l``d`d

te kelvglk` tb` oury (gl tb` `v`lt wb`r` tb` kns` me`s te

keurt) ec tb` nutb`ltgkgty ec tb` krga` keaagtt`d.


10/12

T@[TGAELW VZEK@DPZ@ (KELTD.)

Tb` ANK (aedgcgkntgel, nkk`ss nld kbnlm`) tga`s ec tb`dekua`lts el tb` ganm`d sternm` d`vgk`s sbeuid j`kb`kh`d usglm tb` a`tndntn ec tb` dekua`lts. Tbgs wgiiniiew tb` glv`stgmnter te d`t`ragl` wb`l tb` dekua`ltsw`r` aedgcg`d er wb`l kbnlm`s w`r` and` te tb`dekua`lt prger te tb` glv`stgmntgel.

Nise, tb` prep`rtg`s ec tb` dekua`lts l``d te j` nkk`ss`dcer glcerantgel sukb ns tb` lna` ec tb` nppigkntgel us`d tekr`nt` tb` dekua`lt, tb` nutber ec tb` dekua`lt nldkeapnly b`/sb` werhs cer.

Dntn knrvglm sbeuid j` us`d te r`kev`r dntn tbnt any bnv`j``l ster`d el ulniieknt`d spnk` ec tb` ganm`s ec tb`sternm` d`vgk`s knptur`d.

Iem cgi`s nld Glt`rl`t jrews`r precgi`s sbeuid j` nkk`ss`dte r`trg`v` tb` GV nddr`ss er nddr`ss`s ec tb` nttnkh ergmglnld tnrm`t ankbgl`s. Nkk`ss iems sbeuid j` `xnagl`d ter`kr`nt` tb` tga`igl` ec tb` `v`lt.


11/12

KELKIP[GEL Keaput`r-rìnt`d krga`s `sp`kgniiy tbes` glveivglm tb`

us` ec tb` Glt`rl`t nr` el tb` glkr`ns`. Bnkh`rs bnv``xpiegt`d tb` pew`r ec tb` Glt`rl`t te keaagt anigkgeuskrga`s jy gii`mniiy bnvglm nkk`ss te kerpernt` l`twerhswgtb tb` glt`lt te st`ni, aedgcy er d`strey kinssgcg`dglcerantgel nld dntn.

Te tbgs `cc`kt, s`v`rni keaput`r inws bnv` j``l`stnjigsb`d jy Kyj`r Krga` nwnr` keultrg`s sukb ns tb`Plgt`d Hglmdea, Plgt`d [tnt`s ec Na`rgkn, nld etb`rs tekurtngi tb` spr`nd ec kyj`r-rìnt`d krga`s nkress tb`miej`. Ns stnt`d gl tb` Mugdìgl`s ec NKVE, tb`r` gs tb`

l``d te kr`nt` nld pr`s`rv` keaput`r-jns`d ì`ktrelgk`vgd`lk` gl erd`r te sukk`sscuiiy sbew tb` keltglugty nldglt`mrgty ec tb` `vgd`lk` gl n keurt ec inw. @vgd`lk`r`kev`ry prek`ss`s sbeuid j` pr`s`lt`d gl sukb n wnytbnt tb` sna` r`suits wgii j` ejtngl`d jy n tbgrd pnrtyusglm tb` sna` a`tbeds d`piey`d jy tb` glv`stgmnter.


12/12

Z@C@Z@LK@[ KEPLKGI, V.E.C.].K.J. (:662) 'Z`muintgel ec glv`stgmntery pew`rs nkt :666',

J`bnvgeur, :66= pp.:0.

@i`ktrelgk Vrgvnky Glcerantgel K`lt`r (:6>>) @i`ktrelgk keaaulgkntgels prgvnky nkt

(@KVN). Nvnginji` nt? bttp?//`pgk.erm/prgvnky/`kpn/(Nkk`ss`d? :6 D`kàj`r :6>:).

I`mni Glcerantgel Glstgtut` (:6>:) >2 P[K >6;6 - crnud nld rìnt`d nktgvgty gl

kell`ktgel wgtb keaput`rs. Nvnginji` nt?

bttp?//www.inw.kerlìi.`du/usked`/t`xt/>2/>6;6(Nkk`ss`d? :6 D`kàj`r :6>:).

I`mgsintgel.mev.uh (:663) Veigk` nld oustgk` nkt :663. Nvnginji` nt?

bttp?//www.i`mgsintgel.mev.uh/uhpmn/:663/42/kelt`lts(Nkk`ss`d? >= D`kàj`r

:6>:).

I`mgsintgel.mev.uh (>776) Keaput`r agsus` nkt >776. Nvnginji` nt?

bttp?//www.i`mgsintgel.mev.uh/uhpmn/>776/>2/kelt`lts(Nkk`ss`d? :6 D`kàj`r

:6>:).

[gapsel, A.T., Jnkhanl, H. & Keri`y, O. (:6>6) Bnlds-el `tbgkni bnkhglm nld l`twerh

d`c`ls`. Dìanr Vuj.

]gihglsel, [. (:6>6) 'Meed prnktgk` mugd` cer keaput`r-jns`d ì`ktrelgk `vgd`lk`',

Nssekgntgel ec Kbg`c Veigk` Eccgk`rs, .

]gr`d (:6>:) Kesae, tb` bnkh`r Med wbe cìi te `nrtb. Nvnginji` nt?

bttp?//www.wgr`d.kea/mndm`tinj/:6>:/67/kesae-tb`-med-wbe-cìi-te-`nrtb/nii/

(Nkk`ss`d? >= D`kàj`r :6>:).
http://epic.org/privacy/ecpa/http://www.law.cornell.edu/uscode/text/18/1030http://www.legislation.gov.uk/ukpga/2006/48/contentshttp://www.legislation.gov.uk/ukpga/1990/18/contentshttp://www.wired.com/gadgetlab/2012/09/cosmo-the-god-who-fell-to-earth/all/http://www.wired.com/gadgetlab/2012/09/cosmo-the-god-who-fell-to-earth/all/http://www.wired.com/gadgetlab/2012/09/cosmo-the-god-who-fell-to-earth/all/http://www.wired.com/gadgetlab/2012/09/cosmo-the-god-who-fell-to-earth/all/http://www.wired.com/gadgetlab/2012/09/cosmo-the-god-who-fell-to-earth/all/http://www.wired.com/gadgetlab/2012/09/cosmo-the-god-who-fell-to-earth/all/http://www.wired.com/gadgetlab/2012/09/cosmo-the-god-who-fell-to-earth/all/http://www.wired.com/gadgetlab/2012/09/cosmo-the-god-who-fell-to-earth/all/http://www.wired.com/gadgetlab/2012/09/cosmo-the-god-who-fell-to-earth/all/http://www.wired.com/gadgetlab/2012/09/cosmo-the-god-who-fell-to-earth/all/http://www.wired.com/gadgetlab/2012/09/cosmo-the-god-who-fell-to-earth/all/http://www.wired.com/gadgetlab/2012/09/cosmo-the-god-who-fell-to-earth/all/http://www.wired.com/gadgetlab/2012/09/cosmo-the-god-who-fell-to-earth/all/http://www.wired.com/gadgetlab/2012/09/cosmo-the-god-who-fell-to-earth/all/http://www.legislation.gov.uk/ukpga/1990/18/contentshttp://www.legislation.gov.uk/ukpga/2006/48/contentshttp://www.law.cornell.edu/uscode/text/18/1030http://epic.org/privacy/ecpa/

advanced digital forensics.pdf

Documents