Look Ma, No Disks | SNIA | Experts on Data

Abstract

As more and more enterprise information is consolidated into fibrechannel storage networks, the likelihood of a storage administrator findingthemselves challenged to identify, collect and preserve electronic evidencerelevant to an intrusion, crime or corporate policy violation. Thispresentation presents a whirlwind tour of the processes for collection andpreservation of digital evidence and the challenges traditional forensicspractitioners face in this brave new world where a server may have nodirectly attached disks.

Understand the general requirements placed on information used in the legal process
Build familiarity with sound processes for identification, collection and preservation of digitalevidence
Understand the challenges SAN attached storage poses to the traditional practice of digital forensics