Use of databases
With the easy availability of database software (such as mysql, MS Access, etc.) it seems like more and more people are making use of a database for storing images and information.
Has anyone come across any instances where they have had to deal with a database application of any type during a forensic investigation.
Personally, I see this as becoming more frequent and potentially an area where the investigator will need to have an increased skill level - probably closer to a traditional IT person.
No, I can't say I've ever come across this. Where & how have you experienced this trend?
I use the file finder EnScript in EnCase to carve many types of images, and make many keyword searches across the entire image. These processes should identify if any image files or relevant text are present so I donâ€™t think I have ever missed data hidden in database files (or hope I haven't 😕 ).
I've dealt with numerous fraud cases, where databases have been used â€“ MS Money, MS Access, MySQL, and SAGE, and found what I was looking for so I donâ€™t think traditional IT skills are an issue as databases are fairly easy to learn and deal with, and I would hazard a guess that most â€˜investigatorsâ€™ could handle them no problem. Although I would like to learn more, and I could always do with a course…..
It might be an idea for someone to write a paper on databases and how best to investigate them.