Process Essay: The NYC Computer Forensics

The NYC computer forensics investigative procedures contain eight stages with electronic tools that are used to support an investigation. The first step that is taken is obtaining a search warrant, & in order to do this there must be probable cause to present to a magistrate. How probable cause is identified is by an investigation, or information obtained in a legal standard& documented by the officer who is seeking the evidence, & he/she must prepare an affidavit that defines the area to be searched, & the evidence being sought (Volonino pp 56). The reason for obtaining a search warrant is so that a defendants Fourth Amendment is not violated.
The only time that an officer has the right to seize anything other than what is in the search warrant, at the time of the search warrant is a search & frisk, &only what is found on that person can be seized. Once the …show more content…
The electronic tools used would be Safeback, Expert witness, & Snapback, & one of these tools will be used to complete a bit-stream backup that will be performed on the device. Once the drive is backed up, the drive information will then be saved on write optical disks & began a case file.
Two back up disks will be created for in case something were to happen to one of them. Sometimes it can be difficult completing the backups due to the age of the system, format of the drive, double spaced, & new high capacity devices, & if the devices are MaCintosh. Evidence extraction is the third step in the process, & the newest tool in the FIC is the Expert Witness which allows investigators to view evidence through built in content viewers or external views that the user adds, & this is done by using regular expression searches. Case creation is the fourth step, and Expert Witness is also used in this step. This process allows the extracted information to be placed in a case file, on a hard disk, a floppy disk, or removable