ACPO computer foren...
 
Notifications
Clear all

ACPO computer forensic guidelines

10 Posts
4 Users
0 Likes
672 Views
(@ronaldo9)
Posts: 18
Active Member
Topic starter
 

Hi

Do you believe there is any issues/problems with the ACPO computer forensic guidelines?

This could range from simple things like the layout to missing evidence collection step. What do you think?

This is just a general question so please dont go on killing this topic or taking it too extreme.

Thank you

 
Posted : 13/09/2010 3:45 pm
(@cults14)
Posts: 367
Reputable Member
 

Ronaldo, this is as you say a very general question. From my perspective - a newbie part-time internal corporate resource - the ACPO guidelines were recommended by independent consultants as a starting point for the collection of digital evidence.

I am only involved in PC/laptop and 'traditional' USB storage devices so they've served me pretty well.

There must be a reason for your question though - would be good if you shared that with the community

Regards

 
Posted : 13/09/2010 3:59 pm
(@jonathan)
Posts: 878
Prominent Member
 

Hi

Do you believe there is any issues/problems with the ACPO computer forensic guidelines?

This could range from simple things like the layout to missing evidence collection step. What do you think?

This is just a general question so please dont go on killing this topic or taking it too extreme.

Thank you

I believe the guidelines lost credibility after taking on commercial sponorship. Otherwise a decent set of principles to guide the experienced examiner.

Why do you want to know though? What do you think of them?

 
Posted : 13/09/2010 5:42 pm
(@ronaldo9)
Posts: 18
Active Member
Topic starter
 

I was just wondering, they say the ACPO guidelines are good and the closest thing that can become the universal guidelines for computer forensics. But then why isnt it?

I had thought there is maybe something wrong with it hence why I asked.

 
Posted : 13/09/2010 7:20 pm
(@jonathan)
Posts: 878
Prominent Member
 

they say the ACPO guidelines are good and the closest thing that can become the universal guidelines for computer forensics. But then why isnt it?

The ACPO Guidelines (the clue is in the name!) are there to guide practitioners and offer considered opinion on best practice, nothing else. What do you mean by 'universal'? The strength of the ACPO Good Practice Guide for Computer-Based Evidence is bottom-up or user-generated; it comes from the fact that so many respected people in the field generally agree with their content.

 
Posted : 13/09/2010 7:43 pm
(@cults14)
Posts: 367
Reputable Member
 

they say the ACPO guidelines are good ….

Gotta ask - who are 'they'? ?

 
Posted : 13/09/2010 8:10 pm
(@ronaldo9)
Posts: 18
Active Member
Topic starter
 

What I meant by universal was the debate "the need of universal computer forensic guidelines i.e. like evidence collection steps and procedures etc"

what differences are they in other models like Electronic Crime Scene Investigation A Guide for First Responders against the ACPO guidelines? if any at all?

 
Posted : 13/09/2010 8:13 pm
(@ronaldo9)
Posts: 18
Active Member
Topic starter
 

"They" as in many authors I have come across.

 
Posted : 13/09/2010 8:15 pm
(@jonathan)
Posts: 878
Prominent Member
 

What I meant by universal was the debate "the need of universal computer forensic guidelines i.e. like evidence collection steps and procedures etc"

Each job has its own unique circumstances. A prescriptive 'one size fits all' approach just wouldn't work.

what differences are they in other models like Electronic Crime Scene Investigation A Guide for First Responders against the ACPO guidelines? if any at all?

Sounds like a project question. The only way to understand the differences would be read both guides.

 
Posted : 14/09/2010 12:07 am
(@trewmte)
Posts: 1877
Noble Member
 

ronaldo9 nothing wrong with asking if a guide is relevant and always a good idea to understand what guidelines provide and what they don't. You may want to look at this early thread about ACPO Guidelines

http//www.forensicfocus.com/index.php?name=Forums&file=viewtopic&t=6060&postdays=0&postorder=asc&start=0

 
Posted : 14/09/2010 11:36 am
Share: