This book is intended to assist State and local law enforcement and other first responders who may be responsible for preserving an electronic crime scene and for recognising, collecting, and safeguarding digital evidence. It is not all inclusive but addresses situations encountered with electronic crime scenes and digital evidence. All crime scenes are unique and the judgement of the first responder, agency protocols, and prevailing technology should all be considered when implementing the information in this guide. First responders to electronic crime scenes should adjust their practices as circumstances - including level of experience, conditions, and available equipment - warrant.The circumstances of individual crime scenes and Federal, State, and local laws may dictate actions or a particular order of actions other than those described in this guide. First responders should be familiar with all the information in this guide and perform their duties and responsibilities as circumstances dictate. This is an edited and excerpted edition of a U.S. Dept. of Justice publication.
Author(s): David E. Learner
Year: 2009
Language: English
Pages: 202
Electronic Crime Scene Investigation......Page 3
Contents......Page 7
Preface......Page 9
Introduction......Page 11
Electronic Devices: Types, Description, and Potential Evidence......Page 15
Investigative Tools and Equipment......Page 26
Securing and Evaluating the Scene......Page 27
Documenting the Scene......Page 30
Evidence Collection......Page 31
Packaging, Transportation, and Storage of Digital Evidence......Page 39
Electronic Crime and Digital Evidence Considerations by Crime Category......Page 42
Computer Intrusion......Page 43
Counterfeiting......Page 44
Domestic Violence, Threats, and Extortion......Page 45
Gambling......Page 46
Narcotics......Page 47
Online or Economic Fraud......Page 48
Software Privacy......Page 49
Terrorism (Homeland Security)......Page 50
Glossary......Page 51
Summary......Page 61
Technical Working Group for the Investigation of High Technology Crimes......Page 63
Introduction and Investigative Issues......Page 66
Tracing an Internet Address to a Source......Page 68
Investigations Involving E-Mail......Page 80
Investigations Involving Websites......Page 91
Investigations Involving Instant Message Services, Chat Rooms, and IRC......Page 96
Investigations Involving File Sharing Networks......Page 111
Investigations of Network Intrusion/Denial of Service......Page 116
Investigations Involving Bulletin Boards, Message Boardsm Listservs, and Newsgroups......Page 122
Legal Issues......Page 133
Appendix A. Glossary......Page 148
Appendix C. Accessing Detailed Headers in E-Mail Messages......Page 151
Appendix D. File Sharing Investigative Suggeswted Checklist......Page 153
Appendix E. Sample Subpoenas and Reports......Page 154
Appendix F. Examples of Potential Sources of Evidence in Network Investigations (May Be Applied to Other Investigations)......Page 167
Appendix G. Sample Language for Preservation Request Letters Under 18 U.S.C. ยง 2703 (F)......Page 168
Appendix H. Sample Language for 2703 (D) Court Order and Application......Page 170
Appendix I. Technical Resources List......Page 175
Appendix J. Legal Resources List......Page 199
Appendix K. List of Organizations......Page 200
Index......Page 203
