Computerworld Singapore: Doing Data Forensics Right with Linux

“Data forensics is business of gathering and analysing data from
electronic storage systems and devices. These devices are, today,
able to hold enormous amounts of data and are kept in numerous
formats and physical sizes.

“The need for data forensics is driven by the increasing need of
evidence gathering by the legal system when disputes arise in
criminal cases and civil disputes. In addition, today’s elevated
security climate warrants the timely and accurate recovery of
deleted and otherwise obfuscated data for analysis. With the
explosion of data formats and file systems, the task a forensic
investigator faces would have been daunting and difficult to
surmount if not for the existence of Linux…”

Complete Story