Forward Signed Electronically Evidence with airSlate SignNow

Integrate signed electronically evidence

[Music] [Music] hello today we're going to talk about electronic evidence so first off just defining what electronic evidence is electronic evidence is data that supports or refutes a hypothesis formulated during an investigation we'll talk more about digital evidence later in the context of digital forensic investigations but now I just want to give you an overview of what electronic evidence is and how we use it the word evidence has a very specific meaning not all data on the computer is likely to be evidence only specific sections of the data that support or deny hypothesis will be considered evidence a major mistake that I hear a lot of people talking about is they they believe that all data that we copy from a computer or a phone or whatever all of that collection of data is evidence it's not necessarily true the evidence is just what supports or denies some hypothesis that we're testing so only certain parts or certain pieces of that data will eventually be evidence that we will submit to court or whatever we're submitting to electronic evidence is based on context so evidence always has to be evaluated in context so we need to figure out what exactly are we trying to prove or deny we potentially want to prove that Google Chrome was used to access a website well in this case Google Chrome will probably be relevant the data relating to Google Chrome will be relevant if we want to prove that google chrome was specifically used to access a website but in another case imagine that we want to prove the computer was started at a specific time in that case Google crime or Google Chrome will likely not be as relevant to the case so in one case Google Chrome is extremely relevant because we want to know something specifically related to it in the other case the start time of the computer we can probably find without reverting to google chrome and it's likely not to be related so we need to think about the context when is the data relevant to the case electronic evidence is data that gives us some type of information related to what we were investigating so we can have either direct direct information where the data directly describes the event or information in this case it could be something like log files so we can go through a log file and see exactly what happened and when it happened so it's giving us direct information this user logged into the computer at this time that's directly observable information indirect evidence or indirect information can be something like where the data relates to an event or information in a secondary way and normally what we're looking at are the effects of some cause whatever it's indirect so in this case for example a prefetch file that exists in windows shows that a program had been previously run prefetch itself unless we examine the...