CD and DVD Forensics
Walking readers through all facets of handling, examining, and processing CD and DVD evidence for computer forensics, this how-to book provides tools to open CDs and DVDs in an effort to identify evidence of a crime.
TABLE OF CONTENTS CD and DVD Forensics
Chapter 4: Collecting CD and DVD Evidence
The following sections address the number of specific considerations needed for handling and collecting Compact Disc (CD) and Digital Versatile Disc (DVD) evidence. These sections also describe how to recognize CD and DVD media, how to protect yourself while collecting this evidence, and what precautions need to be followed in order to preserve it.
Recognizing CD and DVD Media
Overview
A common belief is that it is not necessary to collect manufactured discs as evidence because such evidence can only be stored on recordable discs. If it was possible to correctly identify manufactured discs and recordable discs simply by looking at them, manufactured discs might be able to be excluded. Unfortunately, this is not the case. If it is necessary to limit the number of discs being collected and time does not permit any analysis of the discs, it may be necessary to select discs based on their appearance. This should be avoided whenever possible. Discs appearing to be manufactured that in reality have been recorded are not uncommon.
As part of the InfinaDyne CD and DVD Forensics class, students are given a disc that has been created with a clear laser-printed color label and that intentionally looks like an America Online (AOL) disc. If inserted into a computer with Windows, this disc behaves like an AOL distribution disc. Depending on the types of cases you work on, it is possible that you will encounter such a subterfuge. The question is not whether you were able to recognize...
Copyright Syngress Publishing, Inc. 2007 under license agreement with Books24x7
