Re: [ml] attivita' forense

Paolo Ottolino wrote:
 > Aggiungerei anche la guida NIST SP 800-86 (ancora instato draft, ma di
> prox pubblicazione):
> "Guide to Computer and Network Data Analysis: Applying Forensic
> Techniques to Incident Response"

Dove, nelle primissime pagine e' scritto espressamente:
"...Computer and network data analysis is similar to digital forensics
and uses many of the same techniques and tools, but data analysis does
not necessarily include all of the actions necessary for preserving the
integrity of all information collected, nor does it include keeping a
chain of custody or other evidence preservation actions. Accordingly,
this publication should not be used as a guide for executing a digital
forensic investigation, construed as legal advice, or used as the basis
for performing investigations of criminal activity."

vodka