E-crime scene procedure

You may just want to stay out of the way. The NZ Police's Auckland e-crime unit (ECU) offers some some basic advice to officers at a suspected crime scene:.

You may just want to stay out of the way. The NZ Police's Auckland e-crime unit (ECU) offers some some basic advice to officers at a suspected crime scene:

  • Keep those suspected of IT offences away from target systems.

  • Take photos and/or sketches of equipment location, record model and serial numbers.

  • Devices that are on stay on (record on-screen data), those off stay off.

  • Label all cables at all connection points.

  • If PCs running during a search warrant, screen activity should be recorded and then computers turned off AT THE WALL. If PC networked, check with ECU.

  • Think conventional forensic, that is, fingerprints, photos, trace evidence.

  • Put system in non-static bags and keep away from other electronic devices.

  • Recover all disks, related paper and exact passwords.
-- Excerpted from internet.law.nz: selected issues, David Harvey, LexisNexis

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags e-crime

Show Comments
[]