Language of Computer Crime Investigation

Question 1

Examination vs Analysis in digital evidence processing

Answer 1

Examination involves data translation, reduction, recovery, organization, and searching.

Analysis involves critical thinking, assessment, experimentation, fusion, correlation, and validation to gain an understanding of and reach conclusions about the incident on the basis of available evidence.

Question 2

Aim of examination vs Aim of analysis

Answer 2

Examination prepares data for analysis

Analysis gain insight into what happened, where, when,and how, who was involved, and why