Investigating with backup evidence is a very time-consuming task.
- The forensic investigator needs to be able to find the last time when the suspect did something. He has to look at the latest backup and see if this is somewhere in there. To help him out, he can use a software called forensic evidence discovery (FED) which provides investigative tools that makes it easy for him to search and visualize backups.
Share a personalized message with your friends.