Actually I am the least one deserving the "expert" title, particularly related to "digital forensics", JFYI:
http://www.forensicfocus.com/c/aid=65/interviews/2013/jacopo-forum-member-jaclaz/
What you could have a look at is the (UK) ACPO guidelines:
http://www.7safe.com/electronic_evidence/ACPO_guidelines_computer_evidence.pdf
jaclaz
↧