2. Preservation and collection of digital evidence at the crime/incident scene

2.3. Relationship between the incident resolution process and forensic computing

These procedures relate to digital forensics (Figure 13) whenever anincident is detected and we want to know more about it, in an attempt to bring the perpetrator to justice. Thus, in the incident management process, we have the same investigation process, indicated in section 1.6, regarding the 6 steps of the analysis framework.


Figure 13 – Incident resolution process

Source: http://www.c-jump.com/bcc/t155t/Week03a/W24_0030_overview_of_caseinci.htm