by Sean McLinden
"Traditionally, computer forensics begins with the seizure of all possible evidence then test, test, test until either you find something or you decide that there is nothing to be found. To paraphrase an example attributed to Rob Lee, this is like doing an autopsy as the first step in a medical examination. This is a luxury which may become the exception rather than the norm for digital forensic (DF) examinations in the future…"
