Page tree

Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.


Forensic best practice dictates that the specific versions of software used by a forensic practitioner during an examination should be identified in any contemporaneous notes (and final report).  These specific software versions should also be stored so that at a later date, the exact version can be reinstalled to replicate a specific process.  We would also go as far as suggesting that all software used for forensic purposes shoud be signed with an Authenticode digital certificate.