CD and DVD Forensics

The last step of any examination is assembling the data into a report. There are a number of items to consider when doing this with CD/DVD Inspector. If you import the data into a case management system such as EnCase, a lot of the necessary information can be taken from that environment. However, the problem with this approach is that it obscures the origin of the data, whether from a Compact Disc (CD) or Digital Versatile Discs (DVDs). This may or may not be important, depending on the specific case and any additional data obtained from other sources.
You should be familiar with the informational dialogs presented by CD/DVD Inspector, as well as the reports that are produced directly from it. The informational dialogs are specific to the media and provide information unique to CDs and DVDs, whereas the reports are focused on the files found on the media.
If one or more discs are the sole source of evidence in a case, documenting the specifics about the disc(s) is important; information from CD/DVD Inspector should be used to fulfill this requirement.
When gathering information from CD/DVD Inspector, it is recommended that you create a folder to hold all of the reports. If an image report is generated, it should be saved to individual folders within the common reporting folder.
The following sections discuss each of the data items that are recommended to be collected from CD/DVD Inspector. Whether or not a particular data item applies to a particular...