Glossary of Computer Forensics Terms
|Locard’s exchange principle||
The theory that anyone, or anything, entering a crime scene both takes something of the scene with them, and leaves something of themselves behind when they leave. In the digital world, this translates into that when two computers come in "contact" with each other over a network, they exchange something with each other. This "something" may show up in log files, the registry, in memory or other places on the systems.