Page 1

REMOTECOLLECTION · A GUIDE FOR UK LAWYERS Remote Forensic Collection: When Can It Be Defensible? Secure Agents, Remote Access and the Disciplines That Replace Physical Presence COMPUTER FORENSICS LAB

§ ABOUT THE AUTHOR PREPARED BY COMPUTER FORENSICS LAB E-DISCOVERY TEAM FULL CHAIN-OF-CUSTODY DOCUMENTATION

§ CONTENTS In this guide 01 Executive summary 02 The problem in plain English: the examiner is not in the room 03 The remote-collection models 04 What makes remote defensible: the five disciplines 05 Bandwidth, interruption and the physics of distance 06 The custodian problem: cooperation, interference and supervision 07 Security, privacy and cross-border considerations 08 When attendance still wins 09 Worked examples 10 Common mistakes and technical limitations 11 Questions to ask · Suggested wording 12 Checklist and red flags · When to involve a digital forensic expert 13 Frequently asked questions 14 Glossary · References · Disclaimer · How a specialist laboratory can assist

§ 01 · ORIENTATION Executive summary THE HEADLINE POINT: DEFENSIBILITYFOLLOWSMETHOD, NOTGEOGRAPHY

§ 02 · FIRST PRINCIPLES The problem in plain English: the examiner is not in the room

§ 03 · THE MODEL S The remote-collection models MODEL HOW IT WORKS STRENGTH AND PROPER DOMAIN