Digital Evidence Bag
From Just Solve the File Format Problem
(Difference between revisions)
Dan Tobias (Talk | contribs) (Created page with "{{FormatInfo |formattype=electronic |subcat=Forensics and Law Enforcement |extensions={{ext|bag}}, {{ext|tag}}, {{ext|index}} }} Bag it and tag it, electronically, with a '''[...") |
Revision as of 02:10, 19 October 2013
Bag it and tag it, electronically, with a Digital Evidence Bag. It's the computerized version of an evidence bag used to store things kept to solve a case and convict a perpetrator.
A Digital Evidence Bag actually consists of several related files:
- A .bag file containing the raw data (network captures, device bit stream, etc.)
- A .tag file containing metadata (in plain text) that is specific to the case.
- A .index file containing metadata related to the data sources, file formats, and devices used.
Like with a lot of obvious, generic concepts, somebody is trying to get a patent on this whole idea of keeping evidence in a digital file with a tag file accompanying it.
