Definition
Techniques that hinder the acquisition and analysis of digital evidence by hiding, altering or destroying data, reducing the effectiveness of forensic investigations
Visual IT Encyclopedia › Information Security › System Security › Digital Forensics
Definition
Techniques that hinder the acquisition and analysis of digital evidence by hiding, altering or destroying data, reducing the effectiveness of forensic investigations
Compare original and copy hashes; record evidence handling
Examine hidden areas, residual data and backups
Distinguish missing records, clock errors and possible tampering
Review differences between two analyses of the same evidence