Path:
Home >
MISC >
Page95 > GA/T 1977-2022
Price & Delivery
US$149.00 · In stock · Download in 9 secondsGA/T 1977-2022: Forensic sciences-Technical specifications for computer memory data extraction
Delivery: 9 seconds. True-PDF full-copy in English & invoice will be downloaded + auto-delivered via email. See
step-by-step procedureStatus: Valid
| Std ID | Version | USD | Buy | Deliver [PDF] in | Title (Description) |
| GA/T 1977-2022 | English | 149 |
Add to Cart
|
3 days [Need to translate]
|
Forensic sciences-Technical specifications for computer memory data extraction
|
Click to Preview a similar PDF
Basic data
| Standard ID | GA/T 1977-2022 (GA/T1977-2022) |
| Description (Translated English) | Forensic sciences-Technical specifications for computer memory data extraction |
| Sector / Industry | Public Security (Police) Industry Standard (Recommended) |
| Classification of Chinese Standard | A92 |
| Classification of International Standard | 13.310 |
| Word Count Estimation | 6,646 |
| Date of Issue | 2022-02-18 |
| Date of Implementation | 2022-06-01 |
| Issuing agency(ies) | Ministry of Public Security |
| Summary | This standard applies to the field of forensic science, computer memory data extraction inspection. |
GA/T 1977-2022: Forensic sciences-Technical specifications for computer memory data extraction
---This is a DRAFT version for illustration, not a final translation. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.) will be manually/carefully translated upon your order.
ICS 13.310
CCSA92
People's Republic of China Public Security Industry Standards
Forensic Science Computer Memory Data Extraction
Inspection Specifications
Released on 2022-02-18
2022-06-01 Implementation
Released by the Ministry of Public Security of the People's Republic of China
foreword
This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1.Structure and Drafting Rules for Standardization Documents"
drafting.
Please note that some contents of this document may refer to patents. The issuing agency of this document assumes no responsibility for identifying patents.
This document is proposed by the National Criminal Technology Standardization Technical Committee Electronic Evidence Inspection Sub-Technical Committee (SAC/TC179/SC7)
And centralized.
This document was drafted by. The Third Research Institute of the Ministry of Public Security, the Network Reconnaissance Technology Research and Development Center of the Ministry of Public Security, the Physical Evidence Identification Center of the Ministry of Public Security, and the Judicial Forensic
National Academy of Sciences, Dalian Public Security Bureau, Hebei Provincial Public Security Department, China Criminal Police Academy, and Zhejiang Provincial Public Security Department Criminal Investigation Corps.
The main drafters of this document. Wu Songyang, Du Lin, Zhai Xiaofei, Guo Lili, Guo Hong, Shi Shaopei, Liu Haoyang, Han Majian, Luo Wenhua, Jin Meishun.
Forensic Science Computer Memory Data Extraction
Inspection Specifications
1 Scope
This document specifies the equipment, extraction and inspection steps, and inspection results of memory data extraction and inspection methods in computers in the field of forensic science.
expression.
This document applies to the examination of data extracted from computer memory in the field of forensic science.
2 Normative references
The contents of the following documents constitute the essential provisions of the documents through normative references in the text. Among them, dated references,
Only the version corresponding to the date applies to this document; for undated references, the latest version (including all amendments) applies to this document
document.
GB/T 29360 Electronic physical evidence data recovery inspection procedures
GB/T 29362 Electronic physical evidence data search and inspection rules
GA/T 756 Technical Specifications for Forensic Science Electronic Data Collection and Extraction
GA/T 976 General Method for Forensic Scientific Appraisal of Electronic Data
GA/T 1174 General Method for Field Acquisition of Electronic Evidence Data
GA/T 1568 Forensic Science Electronic Evidence Examination Terminology
3 Terms and Definitions
GB/T 29360, GB/T 29362, GA/T 756, GA/T 976, GA/T 1174, GA/T 1568 and the following terms
and definitions apply to this document.
3.1
computer memory computer memory
The random access memory in the computer is used to temporarily store the calculation data in the CPU and the data exchanged with the external memory such as the hard disk.
3.2
memory mirroring memorymirroring
A data file generated by copying memory data bit by bit.
4 devices
4.1 Hardware
Electronic physical evidence inspection workstations, read-only interface devices, dedicated storage media, etc.
4.2 Software
Memory extraction software, electronic data forensics comprehensive analysis software.
...