DFI News

Articles

There Are No Forensic Tools...
Wed, 09/05/2012 - 8:00pm

Your thinking and approach are dangerousl and fundamentally flawed if they are tool-centric when performing collections, analysis, and investigations. Tools simply assist the investigator by expediting a process or helping interpret the data. As investigators we cannot simply trust in a tool’s resulting information without validation, verification, and comparison to another method or tool’s result. Our professional duty is to know how things that assist our job function work at a very technical level. This is not required in many other professions.

Digital forensics and computer investigations have a basis in scientific methodology that we need to accept and understand to perform our job and ultimately explain our findings. This requires a level of skepticism and objective thinking that is in direct conflict to having blind trust of the claims made by others, the manufacturer or by a developer as to the authenticity of the results produced.

From: You’re a tool, a digital forensics tool. by Douglas Brush in SANS Computer Forensic Investigations and Incident Response Blog

Topics

Share this Story

X
You may login with either your assigned username or your e-mail address.
The password field is case sensitive.
Loading