Forensics

Cyber Forensics

Digital Forensics is an exact science - not the procedures but the results.

Cyberforensics is an electronic discovery technique used to determine and reveal technical criminal evidence. It often involves electronic data storage extraction for legal purposes.Although still in its infancy, cyberforensics is gaining traction as a viable way of interpreting evidence.

Cyberforensics is also known as computer forensics.

Cybercrimes cover a broad spectrum, from email scams to downloading copyrighted works for distribution, and are fueled by a desire to profit from another person's intellectual property or private information.

Cyberforensics can readily display a digital audit trail for analysis by experts or law enforcement. Developers often build program applications to combat and capture online criminals; these applications are the crux of cyberforensics.

Cyberforensic techniques include:

  • Cross-driven analysis that correlates data from multiple hard drives,
  • Live analysis, which obtains data acquisitions before a PC is shut down,
  • Deleted file recovery

Each of the above techniques is applied to cyberforensic investigations.

Forensic investigators typically follow a standard set of procedures: After physically isolating the device in question to make sure it cannot be accidentally contaminated, investigators make a digital copy of the device's storage media. Once the original media has been copied, it is locked in a safe or other secure facility to maintain its pristine condition. All investigation is done on the digital copy.

Investigators use a variety of techniques and proprietary software forensic applications to examine the copy, searching hidden folders and unallocated disk space for copies of deleted, encrypted, or damaged files. Any evidence found on the digital copy is carefully documented in a "finding report" and verified with the original in preparation for legal proceedings that involve discovery, depositions, or actual litigation.

Computer forensics has become its own area of scientific expertise, with accompanying coursework and certification.

Contact

Contact Me

Let’s connect! I would love to help