Grobler, MMVon Solms, SH2009-07-232009-07-232009-07Grobler, MM and Von Solms, SH. 2009. Best practice approach to live forensic acquisition. ISSA 2009 (Information Security for South Africa), University of Johannesburg, Gauteng, South Africa, 6-8 July, 2009. pp 12978-1-86854-740-1http://hdl.handle.net/10204/3509ISSA 2009 (Information Security for South Africa), University of Johannesburg, Gauteng, South Africa, 6-8 July, 2009The development of the Live Forensic discipline instigates the development of a method that allows forensically sound acquisition to stand fast in a court of law. The study presents the development of a comprehensive model for forensically sound Live Forensic Acquisition, the Liforac model. The Liforac model presents a number of concepts that are already available within the Cyber Forensics discipline, combined as a single document. It composes four distinct dimensions: laws and regulations, timeline, knowledge and scope. These dimensions combine to present a wide ranging model to guide first responders and forensic investigators in acquiring forensically sound digital evidence. The dimensions were identified as part of an intense research study on the current application of live forensics and the associated problems and suggested controls. The Liforac model is an inclusive model that presents all aspects related to live forensic acquisition, suggesting ways in which a live forensic acquisition should take place to ensure forensic soundness. At the time of writing, this Liforac model is the first document of this nature that could be found for analysis. It serves as a foundation for future models that can refine the current processes.Live forensic acquisitionCyber forensicsForensic modelLiforac modelInformation securityForensically sound digital evidenceISSA 2009Conference PresentationGrobler, M., & Von Solms, S. (2009). Best practice approach to live forensic acquisition. http://hdl.handle.net/10204/3509Grobler, MM, and SH Von Solms. "Best practice approach to live forensic acquisition." (2009): http://hdl.handle.net/10204/3509Grobler M, Von Solms S, Best practice approach to live forensic acquisition; 2009. http://hdl.handle.net/10204/3509 .TY - Conference Presentation AU - Grobler, MM AU - Von Solms, SH AB - The development of the Live Forensic discipline instigates the development of a method that allows forensically sound acquisition to stand fast in a court of law. The study presents the development of a comprehensive model for forensically sound Live Forensic Acquisition, the Liforac model. The Liforac model presents a number of concepts that are already available within the Cyber Forensics discipline, combined as a single document. It composes four distinct dimensions: laws and regulations, timeline, knowledge and scope. These dimensions combine to present a wide ranging model to guide first responders and forensic investigators in acquiring forensically sound digital evidence. The dimensions were identified as part of an intense research study on the current application of live forensics and the associated problems and suggested controls. The Liforac model is an inclusive model that presents all aspects related to live forensic acquisition, suggesting ways in which a live forensic acquisition should take place to ensure forensic soundness. At the time of writing, this Liforac model is the first document of this nature that could be found for analysis. It serves as a foundation for future models that can refine the current processes. DA - 2009-07 DB - ResearchSpace DP - CSIR KW - Live forensic acquisition KW - Cyber forensics KW - Forensic model KW - Liforac model KW - Information security KW - Forensically sound digital evidence KW - ISSA 2009 LK - https://researchspace.csir.co.za PY - 2009 SM - 978-1-86854-740-1 T1 - Best practice approach to live forensic acquisition TI - Best practice approach to live forensic acquisition UR - http://hdl.handle.net/10204/3509 ER -