FixmyData - Introduction to Computer Forensics

Introduction to Computer Forensics

Computer forensics is defined as the technical and systematic examination of a computer system and its contents for evidence or supporting evidence of a criminal act under investigation or other computer use activity. However, computer forensics is also widely used in civil litigation matters.

The types of evidence sought vary and can include theft of trade secrets, theft or destruction of intellectual property, and fraud. Computer forensics requires specialized skills beyond routine data gathering and preservation techniques, and care should be taken when selecting a forensics expert.

Computer forensics experts can use a variety of methods to discover data residing in a computer system, including the recovery of deleted, encrypted, or damaged file information.

Typically, computer forensics experts have broader experience with computer hardware and software than general data recovery specialists. Additionally, experts are often called upon to testify in depositions and trials regarding the information recovered.

Computer evidence can exist in many forms or formats. Recognizing this possibility creates an opportunity to recover alternative formats of the same data.

Because protecting evidence is paramount, an experienced computer forensics expert will ensure that the target computer system is handled carefully to prevent any possible evidence from being damaged, corrupted, or otherwise compromised during the investigation due to the procedures used.

Computer forensics experts will take several careful steps to identify and attempt to retrieve evidence that may exist on a target computer system. He/she will also ensure that extracted, potentially relevant evidence is handled properly and protected from subsequent mechanical or electromagnetic damage.

Click here to request more information about FixmyData's computer forensics capabilities.