Computer Forensics Investigations

Computer forensics (sometimes known as computer forensic science is a branch of digital forensic science pertaining to legal evidence found in computers and digital storage media. The goal of computer forensics is to examine digital media in a forensically sound manner with the aim of identifying, preserving, recovering, analyzing and presenting facts and opinions about the information.

Although it is most often associated with the investigation of a wide variety of computer crime, computer forensics may also be used in civil proceedings. The discipline involves similar techniques and principles to data recovery, but with additional guidelines and practices designed to create a legal audit trail.

Evidence from computer forensics investigations is usually subjected to the same guidelines and practices of other digital evidence. It has been used in a number of high profile cases and is becoming widely accepted as reliable within US court systems.

·         We can recover electronic evidence during a computer forensic investigation from the following types of devices:

• Hard Drives
• Back-up Storage Media
• Databases
• E-mail Servers
• Web Servers
• Internet Sites
• Personal Digital Devices (Blackberries and cellular telephones)
• Digital Cameras
• Zip Drives
• Fax Machines
• Digital Answering Machines