Hi
Do you believe there is any issues/problems with the ACPO computer forensic guidelines?
This could range from simple things like the layout to missing evidence collection step. What do you think?
This is just a general question so please dont go on killing this topic or taking it too extreme.
Thank you
Ronaldo, this is as you say a very general question. From my perspective - a newbie part-time internal corporate resource - the ACPO guidelines were recommended by independent consultants as a starting point for the collection of digital evidence.
I am only involved in PC/laptop and 'traditional' USB storage devices so they've served me pretty well.
There must be a reason for your question though - would be good if you shared that with the community
Regards
Hi
Do you believe there is any issues/problems with the ACPO computer forensic guidelines?
This could range from simple things like the layout to missing evidence collection step. What do you think?
This is just a general question so please dont go on killing this topic or taking it too extreme.
Thank you
I believe the guidelines lost credibility after taking on commercial sponorship. Otherwise a decent set of principles to guide the experienced examiner.
Why do you want to know though? What do you think of them?
I was just wondering, they say the ACPO guidelines are good and the closest thing that can become the universal guidelines for computer forensics. But then why isnt it?
I had thought there is maybe something wrong with it hence why I asked.
they say the ACPO guidelines are good and the closest thing that can become the universal guidelines for computer forensics. But then why isnt it?
The ACPO Guidelines (the clue is in the name!) are there to guide practitioners and offer considered opinion on best practice, nothing else. What do you mean by 'universal'? The strength of the ACPO Good Practice Guide for Computer-Based Evidence is bottom-up or user-generated; it comes from the fact that so many respected people in the field generally agree with their content.
they say the ACPO guidelines are good ….
Gotta ask - who are 'they'? ?
What I meant by universal was the debate "the need of universal computer forensic guidelines i.e. like evidence collection steps and procedures etc"
what differences are they in other models like Electronic Crime Scene Investigation A Guide for First Responders against the ACPO guidelines? if any at all?
"They" as in many authors I have come across.
What I meant by universal was the debate "the need of universal computer forensic guidelines i.e. like evidence collection steps and procedures etc"
Each job has its own unique circumstances. A prescriptive 'one size fits all' approach just wouldn't work.
what differences are they in other models like Electronic Crime Scene Investigation A Guide for First Responders against the ACPO guidelines? if any at all?
Sounds like a project question. The only way to understand the differences would be read both guides.
ronaldo9 nothing wrong with asking if a guide is relevant and always a good idea to understand what guidelines provide and what they don't. You may want to look at this early thread about ACPO Guidelines
http//www.forensicfocus.com/index.php?name=Forums&file=viewtopic&t=6060&postdays=0&postorder=asc&start=0