Computer Forensics



Computer forensics - also known as digital forensics and cyber forensics - relates to the application of analytical techniques employed to collect, recover, authenticate, preserve and analyse electronic data for legal purposes.


Applied forensic computing comprises four main stages, namely:


  • Identifying sources of digital evidence.
  • Securing and preserving identified evidence.
  • Analyzing the evidence.
  • Documenting legally admissible evidence.


Want To Study Forensics/CSI?



Psychology Programs




Computer-forensics world notes the most common situations in which computer forensics is employed include:



  • Accidental or deliberate unauthorized disclosure of corporate data.
  • Employee internet abuse. 
  • Damage assessment and analysis. 
  • Industrial espionage. 
  • Criminal fraud and deception cases.


Insightful talk by Davin Teo discussing his work as a digital forensic investigator.





Digital Evidence



According to the National Institute of Justice, digital evidence is information and data of value to an investigation that is stored on, received, or transmitted by an electronic device. This evidence is acquired when data or electronic devices are seized and secured for examination.


Digital-evidence is:


  • Latent, like fingerprints or DNA evidence.
  • Crosses jurisdictional borders quickly and easily.
  • Is easily altered, damaged, or destroyed.
  • Can be time sensitive.


It is important to remember that digital evidence may also contain physical evidence such as DNA, fingerprints, or serology. As such, physical evidence should be preserved for appropriate examination.


The Critical Role of First Responders in Collecting Digital Evidence


As technology advances, so have the knowledge and duties required of law enforcement officers at a crime scene. The scope of evidence to be searched for and collected at a crime scene now includes digital-evidence such as cell phones and computer networking devices. Some of these devices might be hidden in ceilings or other locations that are not immediately evident.


At the same time, forensics experts face an ever-expanding backlog of digital-evidence due to the increased use of computers. Training and preparing first responders to perform preliminary investigations could help reduce the digital-evidence backlog and help law enforcement make significant headway into solving a range of crimes, including:


  • Computer Threats.
  • Missing Person Cases.
  • Fraud Cases.
  • Theft.


Onsite analysis by first responders would speed up initial investigative tasks, reducing the workload of digital forensics experts and allowing them to focus on more in-depth digital-evidence analysis.





Essential Reading



Computer forensics


An Updated Edition of the Definitive Computer-Forensics Text:


Updated to include the most current events and information on cyberterrorism, the second edition of Computer- Forensics: Cybercriminals, Laws, and Evidence continues to balance technicality and legal analysis as it enters into the world of cybercrime by exploring what it is, how it is investigated, and the regulatory laws around the collection and use of electronic evidence. 


Students are introduced to the technology involved in computer forensic investigations and the technical and legal difficulties involved in searching, extracting, maintaining, and storing electronic evidence, while simultaneously looking at the legal implications of such investigations and the rules of legal procedure relevant to electronic evidence. Significant and current computer forensic developments are examined, as well as the implications for a variety of fields including computer science, security, criminology, law, public policy, and administration


See following link for full details.


Computer-Forensics: Cybercriminals, Laws, and Evidence


Recent Articles

  1. The Role of Forensic Evidence in Car Accident Investigations

    Jan 30, 24 07:22 AM

    The Role of Forensic Evidence in Car Accident Investigations
    Insightful article on the role of forensic evidence in car accident investigations.

    Read More

  2. The Role of Forensic Science in Personal Injury Cases

    Oct 20, 23 03:56 AM

    Police cars parked near crime scene fenced with barrier tape
    Insightful article on the role of forensic science in personal injury cases.

    Read More

  3. All About Forensic Science

    Aug 16, 23 09:53 AM

    A forensic science website designed to help anybody looking for detailed information and resources.

    Read More


New! Comments

Have your say about what you just read! Leave me a comment in the box below.
Enjoy this page? Please pay it forward. Here's how...

Would you prefer to share this page with others by linking to it?

  1. Click on the HTML link code below.
  2. Copy and paste it, adding a note of your own, into your blog, a Web page, forums, a blog comment, your Facebook account, or anywhere that someone would find this page valuable.




Back To The Top Of The Page


Go From Computer Forensics Back To The Home Page