Zbiranje digitalnih dokazov v postopkih forenzičnih preiskav

magistrsko delo

Gregor Skerl Beronja (Author), Bojan Dobovšek (Mentor)

Abstract

V dobi, v kateri se življenje vse bolj seli v digitalni svet, je forenzična preiskava zbiranja digitalnih dokazov postala nepogrešljiv del preiskovalnih postopkov tako v zasebnih, poslovnih kot tudi drugih sodnih procesih. Odkrivanje digitalnih sledi in zbiranje digitalnih dokazov sta ključna postopka za razumevanje in reševanje sodobnih izzivov, povezanih z bodisi kibernetsko varnostjo, poslovno skrivnostjo, kibernetskimi prevarami bodisi preiskavami na področju kriminalitete in terorizma. Digitalna forenzika vključuje uporabo sofisticiranih orodji in tehnik za iskanje, pridobivanje in analiziranje digitalnih dokazov, ki jih preiskovalci pridobijo v sklopu zasega digitalnih medijev. Ta orodja strokovnjakom omogočajo, da preiskujejo različne digitalne naprave, kot so računalniki, pametni telefoni, tablični računalniki in celo storitve v oblaku, z namenom, da bi lahko pridobili relevantne dokaze. Proces vključuje različne faze, kot so sprožitev preiskave, planiranje, zbiranje podatkov, analiza in predstavitev ugotovitev. Sam postopek zbiranja digitalnih dokazov je ključna faza v postopku digitalne forenzike, saj moramo vedno zagotavljati verigo skrbništva. Ta faza vključuje iskanje in pridobivanje relevantnih digitalnih podatkov iz različnih naprav in virov, postopek pa mora biti izveden previdno in strokovno. Napačni pristopi zbiranja digitalnih dokazov in uporaba napačne metodologije lahko vodijo v uničenje gradiva. Pridobljene digitalne dokaze je treba analizirati, jih pravilno interpretirati in predstaviti naročniku. Preiskovalec mora ugotoviti in prepoznati relevantne informacije, pridobljene iz metapodatkov, obnovitve izbrisanih datotek, elektronske pošte in podobno. Vsekakor pa ne moremo zanemariti dejstva, da živimo v dobi digitalizacije in dandanes v največji meri uporabljamo predvsem pametne mobilne naprave, in sicer tako za zasebne kot poslovne namene. Zaradi njihove zmogljivosti z njimi izvršujemo raznovrstne operacije – uporabljamo komunikacijska orodja, pošiljamo datoteke, dostopamo do različnih medijev in podobno, kar pametne mobilne naprave uvršča med najzanimivejše in podatkovno polne medije oziroma vire za preiskovanje digitalnih dokazov. Pomembno si je zapomniti, da ko govorimo o zbiranju digitalnih dokazov v postopkih forenzičnih preiskav, ne govorimo zgolj o delu državnih služb, vendar je na tem področju prisotnih ogromno zasebnikov, ki opravljajo izredno kakovostna dela tako za zasebna kot tudi javna naročila.

Keywords

forenzične preiskave;digitalni dokazi;magistrska dela;

Data

Language:	Slovenian
Year of publishing:	2023
Typology:	2.09 - Master's Thesis
Organization:	UM FVV - Faculty of Criminal Justice
Publisher:	[G. Skerl Beronja]
UDC:	343.985:004(043.2)
COBISS:	163832067
Views:	5
Downloads:	0
Average score:	0 (0 votes)
Metadata:

Other data

Secondary language:	English
Secondary title:	Collection of digital evidence in forensic investigation procedures
Secondary abstract:	In an era in which life is moving more and more into the digital world, forensic investigation of digital evidence collection has become an indispensable part of investigative procedures in private, business, and other court processes. Detecting digital traces and collecting digital evidence are key processes for understanding and solving modern challenges related to either cyber security, trade secrets, cyber fraud, or criminal and terrorism investigations. Digital forensics involves the use of sophisticated tools and techniques to search, retrieve and analyze digital evidence that investigators obtain as part of the seizure of digital media. These tools allow experts to investigate various digital devices such as computers, smartphones, tablets, and even cloud services to obtain relevant evidence. The process includes various phases such as initiation of investigation, planning, data collection, analysis, and presentation of findings. The digital evidence collection process itself is a key stage in the digital forensics process, as we must always ensure a chain of custody. This phase involves finding and retrieving relevant digital data from various devices and sources, and the process must be carried out carefully and professionally. Incorrect approaches to collecting digital evidence and using the wrong methodology can lead to the destruction of material. The obtained digital evidence must be analyzed, correctly interpreted, and presented to the client. The investigator must ascertain and identify relevant information obtained from metadata, recovery of deleted files, e-mails, and the like. In any case, we cannot ignore the fact that we live in an era of digitization and nowadays we use smart mobile devices to the greatest extent, both for private and business purposes. Due to their capacity, we perform various operations with them - we use communication tools, send files, access various media, and the like, which makes smart mobile devices one of the most interesting and data-rich media or sources for investigating digital evidence. It is important to remember that when we talk about the collection of digital evidence in forensic investigation procedures, we are not talking only about the work of government services, but many private individuals in this field perform extremely high-quality work for both private and public contracts.
Secondary keywords:	Kriminalistika;Elektronski dokazi;Univerzitetna in visokošolska dela;
Type (COBISS):	Master's thesis/paper
Thesis comment:	Univ. v Mariboru, Fak. za varnostne vede, Ljubljana
Pages:	VIII f., [68] str.
ID:	19904819