Why DFF? Why share infromation at all?
Friday, June 02, 2006 (06:20:10)

Posted by aclarkson

A 2005 publication from the United States Computer Emergency Response Team (US-CERT) outlines the case for best practices clearly and succinctly. Although the paper focuses primarily on the application of digital forensic examination under US law, the rationale for instituting and following established and do(edited)entable procedures is worthwhile reading.

From the US Cert digital reading room:
Discusses the need for computer forensics to be practiced in an effective and legal way, outlines basic technical issues, and points to references for further reading
http://www.us-cert.gov/reading_room/forensics.pdf