What is involved in Computer Forensics and does the process work?
Computer Forensics includes the acquisition, examination, identification, analysis and interpretation of electronic data commonly created and used by computers and related digital devices. The process can be used to support both civil and criminal litigation as well as to enhance overall corporate information technology security. In general, Computer Forensics provides digital evidence to support allegations of certain activity in which computers are involved. The forensic investigators first step is to clearly determine the purpose and objective of this Investigation. Then, the forensic investigator will take several careful steps to identify and extract all relevant data on a particular computer system or systems. Forensic analysis will extract the data that can be viewed by the operating system, as well as data that is invisible to the operating system. The investigator will discover all files on the subject’s system. This includes existing active files, and invisible files; deleted
