|
Computer Evidence Glossary
A |
B |
C |
D |
E |
F |
G
| H |
I |
J |
K |
L |
M |
N |
O |
P |
Q |
R |
S |
T |
U |
V |
W |
X |
Y |
Z
RAID (Redundant Array of
Independent Discs):
A method of storing data
on servers that usually combines
multiple hard drives into one logical
unit thereby increasing capacity,
reliability and backup capability. RAID
systems may vary in levels of
redundancy, with no redundancy being a
single, nonmirrored disc as level 0,
two discs that mirror each other as
level 1, on up, with level 5 being one
of the most common. RAID systems are
more complicated to copy and restore.
RAM (Random Access Memory):
Hardware inside a
computer that retains memory on a
shortterm basis and stores information
while the computer is in use. It is the
“working memory” of the computer into
which the operating system, startup
applications and drivers are loaded when
a computer is turned on, or where a
program subsequently started up is
loaded, and where thereafter, these
applications are executed. RAM can be
read or written in any section with one
instruction sequence. It helps to have
more of this “working space” installed
when running advanced operating systems
and applications. RAM content is erased
each time a computer is turned off.
See
Dynamic Random Access
Memory DRAM.
Raster/Rasterized (Raster or Bitmap
Drawing):
A method of representing
an image with a grid (or “map”) of dots.
Typical raster file formats are GIF,
JPEG, TIFF, PCX, BMP, etc. and typically
have jagged edges.
Record:
Information, regardless
of medium or format that has value to an
organization.
Record Custodian:
A record custodian is an
individual responsible for the physical
storage and protection of records
throughout their retention period. In
the context of electronic records,
custodianship may not be a direct part
of the records management function in
all organizations. For example, some
organizations may place this
responsibility within their Information
Technology Department, or they may
assign responsibility for retaining and
preserving records with individual
employees.
Record Lifecycle:
The time period from
which a record is created until it is
disposed.
Record Owner:
The record owner is the
subject matter expert on the contents of
the record and is responsible for the
lifecycle management of the record. This
may be, but is not necessarily, the
author of the record.
Record Series:
A description of a
particular set of records within a file
plan. Each category has retention and
disposition data associated with it,
applied to all record folders and
records within the category. (DOD 5015)
Record Submitter:
The Record Submitter is
the person who enters a record in an
application or system. This may be, but
is not necessarily, the author or the
record owner.
Records Archive:
See
Repository for Electronic
Records.
Records Hold:
See
Legal Hold.
Records Management:
Records Management is the
planning, controlling, directing,
organizing, training, promoting, and
other managerial activities involving
the lifecycle of information, including
creation, maintenance (use, storage,
retrieval), and disposition, regardless
of media.
Records Manager:
The records manager is
responsible for the implementation of a
records management program in keeping
with the policies and procedures that
govern that program, including the
identification, classification, handling
and disposition of the organization’s
records throughout their retention life.
The physical storage and protection of
records may be a component of this
individual’s functions, but it may also
be delegated to someone else.
See
Records Custodian.
Records Retention Period,
Retention Period:
The length of time a
given records series must be kept,
expressed as either a time period (e.g.,
four years), an event or action (e.g.,
audit), or a combination (e.g., six
months after audit).
Records Retention Schedule:
A plan for the management
of records listing types of records and
how long they should be kept; the
purpose is to provide continuing
authority to dispose of or transfer
records to historical archives.
Records Store:
See
Repository for Electronic
Records.
Recover, Recovery:
See
Restore.
Redaction:
A portion of an image or
document is intentionally concealed to
prevent disclosure of specific portions.
Often done to conceal and protect
privileged portions or avoid production
of irrelevant portions that may contain
highly confidential, sensitive or
proprietary information.
Refresh Rate:
The number of times per
second a display (such as on a CRT or
TV) is updated.
Region (of an image):
An area of an image file
that is selected for specialized
processing. Also called a “zone.”
Registration:
Lining up a forms image
to determine which fields are where.
Also, entering pages into a scanner such
that they are correctly read.
Relative Path:
An implied path.
Remote Access:
The ability to access and
use digital information from a location
offsite from where the information is
physically located. For example, to use
a computer, modem, and some remote
access software to connect to a network
from a distant location.
Render Images:
To take a native format
electronic file and convert it to an
image that appears as the original
format file as if printed to paper.
Report:
Formatted output of a
system providing specific information.
Repository for Electronic
Records:
Repository for Electronic
Records is a direct access device on
which the electronic records and
associated metadata are stored. (DoD
5015) Sometimes called a “records store”
or “records archive.”
Residual Data:
Residual Data (sometimes
referred to as “Ambient Data”) refers to
data that is not active on a computer
system. Residual data includes (1) data
found on media free space; (2) data
found in file slack space; and (3) data
within files that has functionally been
deleted in that it is not visible using
the application with which the file was
created, without use of undelete or
special data recovery techniques. May
contain copies of deleted files,
Internet files and file fragments.
Resolution:
Refers to the sharpness
and clarity of an image. The term is
most often used to describe monitors,
printers, and graphic images.
See
DPI.
Restore:
To transfer data from a
backup medium (such as tapes) to an
online system, often for the purpose of
recovery from a problem, failure, or
disaster. Restoration of archival media
is the transfer of data from an archival
store to an online system for the
purposes of processing (such as query,
analysis, extraction, or disposition of
that data). Archival restoration of
systems may require not only data
restoration but also replication of the
original hardware and software operating
environment. Restoration of systems is
often called “recovery.”
Retention Schedule:
See
Records Retention
Schedule.
Reverse Engineering:
The process of analyzing
a system to identify its intricacies and
their interrelationships, and create
depictions of the system in another form
or at a higher level. Reverse
engineering is usually undertaken in
order to redesign the system for better
maintainability or to produce a copy of
a system without utilizing the design
from which it was originally produced.
For example, one might take the
executable code of a computer program,
run it to study how it behaved with
different input, and then attempt to
write a program that behaved the same or
better.
Review:
The culling process
produces a dataset of potentially
responsive documents that are then
examined and evaluated for a final
selection of relevant and/or responsive
documents and assertion of privilege,
confidentiality, etc., as appropriate.
See also
OnLine Review.
Rewriteable Technology:
Storage devices where the
data may be written more than once –
typically hard drives, floppies and
optical discs.
RFC822:
Standard that specifies a
syntax for text messages that are sent
among computer users, within the
framework of email.
RGB (Red, Green and
Blue):
The three primary colors
in the additive color family which
create all the computer color video
signals for a computer’s color terminal.
Rip:
The procedure used to
extract ESI files from container files,
such as to unbundle email collections
into individual emails, during the
ediscovery process while preserving
metadata, authenticity and ownership.
RIM:
Records and information
management.
RLE (Run Length Encoded):
Compressed image format;
supports only 256 colors; most effective
on images with large areas of black or
white.
ROM (Read Only Memory):
Random memory that can be
read but not written or changed. Also,
hardware, usually a chip, within a
computer containing programming
necessary for starting up the computer,
and essential system programs that
neither the user nor the computer can
alter or erase. Information in the
computer’s ROM is permanently maintained
even when the computer is turned off.
Root Directory:
The top level in a
hierarchical file system. For example on
a PC, the root directory of your hard
drive, usually C:, contains all the
secondlevel subdirectories on that
drive.
Rotary Camera:
In microfilming, the
papers are read “on the fly” with a
camera that is synchronized to the
motion.
Router:
A device that forwards
data packets along networks. A router is
connected to at least two networks,
commonly two LANs or WANs or a LAN and
its ISPs network. Routers are located at
gateways, the places where two or more
networks connect.
RTF (Rich Text Format):
A file format that allows
exchange of text files between different
word processors in different operating
systems.
Glossary - Courtesy of
The Sedona Conference®
|
