Document Fragment View
Fragment Information
Showing contexts for: computer forensics in Umesh S/O. Vittal Patil vs State Of Karnataka on 21 July, 2022Matching Fragments
"17.5. In the case of a personal computer or a
- 49 -CRL.A No. 2760 of 2012
laptop:
17.5.1. When carrying out a search of the premises, as regards any electronic equipment, Smartphone or e-mail account, the search team to be accompanied by a qualified Forensic Examiner.
17.5.2. When carrying out a search of the premises, the investigating officer should not use the computer or attempt to search a computer for evidence. The usage of the computer and/or search should be conducted by a properly authorized and qualified person, like a properly qualified forensic examiner.
17.5.6. If the computer or laptop is in the
- 50 -CRL.A No. 2760 of 2012
power-off mode, the same should not be powered on.
17.5.7. If the computer is powered on and the screen is blank, the mouse could be moved and as and when the image appears on the screen, the photograph of the screen to be taken.
17.5.8. If the computer is powered on, the investigating officer should not power off the computer. As far as possible, the investigating officer to secure the services of a computer forensic examiner to download the data available in the volatile memory i.e., RAM since the said data would be lost on the powering down of the computer or laptop.
17.5.9. If the computer is switched on and connected to a network, the investigating officer to secure the services of a forensic examiner to capture the volatile net work data like IP address, actual net work connections, net work logs, etc., 17.5.10. The MAC address also to be identified and secured.
17.5.11. In the unlikely event of the Forensic examiner not being available, then unplug the computer, pack the computer and the wires in separate faraday covers after labeling them.