Computer forensics is the practice of collecting, analysing and reporting on digital data in a way that is legally admissible. It can be used in the detection and prevention of crime and in any dispute where evidence is stored digitally. Computer forensics follows a similar process to other forensic disciplines, and faces similar issues.
More and more organizations are becoming victims of cyber crime, such as fraud, industrial espionage, phishing or hacking. Attacks are also becoming more targeted, and criminals are using ever-advanced methods to achieve their goals. They break into computer systems and gain access to confidential information, destroy data or inflict other forms of damage on organizations. The hacking of digital communication media, such as smartphones and navigation equipment, is also becoming more common.
Digital forensics is a computer forensic science that involves the process of seizure, acquisition, analysis, and reporting of evidence found in electronic devices and media to be used in a court of law.
The key elements of computer forensics are listed below:
The use of scientific methods
Collection and preservation
Validation
Identification
Analysis and interpretation
Documentation and presentation .
