Make this page my home page
  1. Drag the home icon in this panel and drop it onto the "house icon" in the tool bar for the browser

  2. Select "Yes" from the popup window and you're done!


Investigation Sponsors

Featured Distributors

Investigation Feature

Ikena Forensic Pro
Ikena Forensic Pro

Featured Product Categories

Tips - Volatility of digital evidence

June 10, 2008

PrintCommentRegisterBookmarkRSSWhat's This

Volatility of digital evidence

Submitted by:
DOJ National Institute of Justice


 

Digital data are stored in various forms (random access memory (RAM), read-only memory (ROM), hard drives, and other magnetic or optical media) and are subject to inadvertent alteration, degradation or loss. Almost any activity performed on a device, whether inadvertant or intentional (e.g., powering up or shutting down) can alter or destroy potential evidence. In addition, loss of battery power in portable devices, changes in magnetic fields, exposure to light, extremes in temperature and even rough handling can cause loss of data. Due to these factors, steps should be taken in a timely manner to preserve data.

Special precautions should be taken when documenting, collection, preserving and examining digital evidence. Failure to do so may render it unusuable, result in an inaccurate conclusion or affect its admissibility or persuasiveness. 

Activities that should be avoided include the following:

  • Putting a Post-it note (adhesive material) on the surface of a CD.
  • Using permanent markers to label CDs.
  • Placing magnetic media close to strong magnetic fields (e.g. radio equipment in car trunks, electic motors, computer monitors).
  • Placing magnetic media in high-temperature environments. Exposing optical media (e.g., CD-ROMs) to light or high-temperature environments.
  • Exposing media to static electricity (e.g., transporting or storing media in plastic bags, photocopying).
  • Rough handling of a seemingly sturdy container (e.g., hard drives, laptop computers).



Back to previous page