The Art of Key Word Searching
Technical White Paper, October 17, 2003, Christopher L. T. Brown, CISSP
Abstract
"Keyword searching in computer forensics can make or break an investigation. Choosing the wrong search terms may cause you to miss vital evidence, or may return so many hits that you spend hours looking for a needle in a haystack to find any real evidence. Given the size of today’s computer disks, each search can take many hours, causing delays and frustration unless your search terms are well chosen. This paper is intended to show how a thoughtful approach to keyword selection along with a few simple operators will often net the desired results quickly and with fewer CPU cycles."
« Compare directories identify & remove duplicates | Main | Electronic Evidence - Newsletters and E-mails »
TrackBack
TrackBack URL for this entry:
http://www.typepad.com/services/trackback/6a00d8341c1e5153ef00d83502cfc053ef
Listed below are links to weblogs that reference The Art of Key Word Searching:
Verify your Comment
Previewing your Comment
This is only a preview. Your comment has not yet been posted.
Your comment could not be posted. Error type:
Your comment has been saved. Comments are moderated and will not appear until approved by the author. Post another comment
As a final step before posting your comment, enter the letters and numbers you see in the image below. This prevents automated programs from posting comments.
Having trouble reading this image? View an alternate.
Links
Understanding e-discovery is cri Understanding e-discovery is cri JUST RELEASED! 2nd Ed. - Focusing on computer technology basics, e-discovery procedural rules, rules of evidence for admitting electronic evidence and much more!
Understanding e-discovery is cri FREE: Find eDiscovery Cases/Rules, Litigation Intelligence Links, Service Providers/Experts and More!
Understanding e-discovery is cri DO YOU NEED TO KNOW ABOUT ELECTRONIC DISCOVERY TO PROTECT YOUR CLIENTS? Arkfeld and Associates offers a comprehensive “E-Discovery and Evidence Best Practices” course.
Comments