Digital Forensics Processing and Procedures
Intentionally left as blank
Digital Forensics Processing
and Procedures
Meeting the Requirements of
ISO 17020, ISO 17025, ISO 27001 and
Best Practice Requirements
David Watson
Andrew Jones
Frank Thornton, Technical Editor
AMSTERDAM • BOSTON • HEIDELBERG • LONDON
NEW YORK • OXFORD • PARIS • SAN DIEGO
SAN FRANCISCO • SINGAPORE • SYDNEY • TOKYO
Syngress is an Imprint of Elsevier
Acquiring Editor: Chris Katsaropoulos
Editorial Project Manager: Heather Scherer
Project Manager: Priya Kumaraguruparan
Designer: Russell Purdy
Syngress is an imprint of Elsevier
225 Wyman Street, Waltham, MA 02451, USA
Copyright # 2013 Elsevier, Inc. All rights reserved.
No part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording,or
any information storage and retrieval system, without permission in writing from the publisher. Details on how to seek permission, further information
about the Publisher’s permissions policies and our arrangements with organizations such as the Copyright Clearance Center and the Copyright Licensing
Agency, can be found at our website: www.elsevier.com/permissions.
This book and the individual contributions contained in it are protected under copyright by the Publisher (other than as may be noted herein).
Notices
Knowledge and best practice in this field are constantly changing. As new research and experience broaden our understanding, changes in research methods
or professional practices, may become necessary. Practitioners and researchers must always rely on their own experience and knowledge in evaluating and
using any information or methods described herein. In using such information or methods they should be mindful of their own safety and the safety of
others, including parties for whom they have a professional responsibility.
To the fullest extent of the law, neither the Publisher nor the authors, contributors, or editors, assume any liability for any injury and/or damage to persons or
property as a matter of products liability, negligence or otherwise, or from any use or operation of any methods, products, instructions, or ideas contained in
the material herein.
Library of Congress Cataloging-in-Publication Data
Watson, David (David Lilburn)
Digital forensics processing and procedures : meeting the requirements of ISO 17020, ISO 17025, ISO 27001 and best practice requirements / David
Watson, Andrew Jones.
pages cm
Includes bibliographical references and index.
1. Computer crimes–Investigation. 2. Evidence preservation–Standards. 3. Forensic sciences–Standards. 4. Computer science. I. Title.
HV8079.C65W38 2013
363.250285–dc23
2013021249
British Library Cataloguing-in-Publication Data
A catalogue record for this book is available from the British Library.
ISBN: 978-1-59749-742-8
Printed in the United States of America
131415 10 987654321
