Hi all,
Firstly sorry if I accidently post this in the wrong area, I am new to forensic focus.
Basically I have a situation regarding legacy systems. I have chosen to do my final year study project on evidence that could be found in legacy systems. However I am finding it hard to come across any valued resources as I know legacy systems are not widely (if not hardly) used to this day.
Does anyone know any books, published investigations, journals, or even your personal knowledge of forensics used in these systems?
My argument is that rapid evolvement of technology has forced forensics to keep up the pace in order to analyse new technologies such as tablets and smart phones however has it got the point that forensics have forgotten about legacy data? Therefore leaving them incompatible with today’s forensic tools/ technologies
Also is a magnetic tape a form of legacy system?
A lot of us kept old equipment around to handle old data, and/or have contacts to buy/borrow/lease equipment if needed. And often the client has the equipment you need, it's just a matter of adapting your method to deal with that.
There are many potential legacy systems in the world. Older tapes are one, but also many optical disks from 3.5" to approx 15" platters. Jaz and Zip drives also count along with thousands of floppy disks which are not 3.5" PC compatible. The issues are two fold, finding hardware to read them, and then software to read them.
Tape is still used a lot by data centres, largely I think LTO and SDLT. Backup systems are very complex with mutiplexed data storage being very common.
Legacy system can contain a lot of very valuable information. Forensically, tape can be very interesting as data cannot be changed in the middle of a dataset, and represents a snapshot at point of recording
Tools are often bespoke, but as a system look at MM/PC from