Database forensics used to handle the increasing volume of data in an investigation

webmaster March 4th, 2007

(SELECT * FROM ORACLE_SECURITY) INTERSECT (SELECT * FROM COMPUTER_FORENSICS)

I am interested in forensics applied to Oracle databases but also in Oracle databases applied to forensics which is the other half of the INTERSECTION.

Digital investigations are increasingly having to handle very large datasets as confirmed by a recent posting at security focus below.

http://www.securityfocus.com/brief/448

Additionally Advances in Digital Forensics has a great first chapter on dealing with Terabyte Data Sets in Digital Investigations.

http://www.amazon.com/Advances-Digital-Forensics-International-Information/dp/0387300120

The ability of databases like Oracle to handle very large amounts of data is going to be increasingly useful in digital investigations.