Computer Forensics Emergency Response

	Neil Broom, President of the Technical Resource Center is the coauthor of this brand new Computer Forensics primer. Neil has taken his many years of experience as a law enforcement officer, a computer security professional, and a computer forensics examiner and added a touch of "Life from the Trenches" experience to this innovative guide to the computer forensics field.

Secure the Computer as Evidence

If computer is "OFF", do not turn "ON".
If computer is "ON"
- Stand-alone computer (non-networked)
  - Consult computer specialist
  - If specialist is not available
    - Photograph screen, then disconnect all power sources; unplug from the wall AND the back of the computer.
    - Place evidence tape over each drive slot.
    - Photograph/diagram and label back of computer components with existing connections.
    - Label all connectors/cable end to allow reassembly as needed.
    - If transport is required, package components and transport/store components as fragile cargo.
    - Keep away from magnets, radio transmitters and otherwise hostile environments.
- Networked or business computers
  - Consult a Computer Specialist for further assistance
Pulling the plug could:
- Severely damage the system
- Disrupt legitimate business
- Create officer and department liability

Top 10 Cybersecurity Tips

1. Protect computers with firewalls

2. Use antivirus software

3. Do not open email from unknown sources.

4. Use hard-to-guess passwords and keep them private.

5. Be a responsible cybercitizen.

6. Do not share access to your computer with strangers.

7. Disconnect from the Internet when not in use.

8. Back up your computer regularly.

9. Habitually download security protection update patches.

10. Evaluate computer security at least twice a year.

Services l Training l Products l Home