Defining Atomicity (and Integrity) for Snapshots of Storage in Forensic Computing

Jenny Ottmann, Frank Breitinger, Felix Freiling

The acquisition of data from main memory or from hard disk storage is usually one of the first steps in a forensic investigation. We revisit the discussion on quality criteria for…