Fellow F-Response Founder/Principal Matthew Decker, along with Warren Kruse, Bill Long, and Greg Kelley just published a joint effort paper on Live Forensics entitled:

Dispelling Common Myths of "Live Digital Forensics"

This paper identifies and dispels a number of commonly encountered myths regarding "Live Digital Forensics" providing some clarity on the issue, and offering a path to resolution for organizations burdened by self-imposed, versus Court imposed, mandates.

The paper is currently hosted at the Digital Forensics Certification Board Website here.

We believe the paper goes a long way in dispelling many of the myths surrounding Live Forensics, something we at F-Response are keenly aware of.

We hear from time to time, occasionally from a digital forensics experts, that “Live forensics” and “Phone forensics” aren’t really forensics.  To follow proper protocol using proper tools and techniques, and then to say that the data collected and processed in a case is “not really forensics” is to say that “this evidence is not suitable for use in a court of law” … and that is not acceptable.  Fortunately, it is also not true.

Thanks and Enjoy!

Warmest Regards,

M. Shannon, Founder

F-Response

September 21, 2011