![]() |
About Computer Forensics |
|
Below are descriptions of in-depth articles
that will provide you with a better understanding of computer forensics. |
![]() |
Here's a tip! Computers and computer forensics are highly specialized fields that utilize many special terms. We have prepared a glossary to assist you in further understanding these terms. Throughout articles and other information on this site you will find these terms underlined and hyperlinked. Clicking on any underlined term will open a new window containing an explanation of the term. |
Computer Forensics DefinedComputer forensics is the science of retrieving and chronicling evidence located on a computer's hard drives and other sources of Electronically Stored Information such as floppies, CDs and DVDs, external drives, thumb drives and voice mail servers, so that it can be presented as evidence in a court of law. |
![]() |
![]() |
Basic Steps in Data RecoveryTaking a perfect image of a computer suspected of containing incriminating data is critical to all ensuing investigative work. Its significance must not be underestimated. When an imperfect image is used to gather suspect data, the resulting evidence will be found inadmissible in court. |
Demystifying Computer ForensicsIn this article we explain what computer forensics involves and how it relates to the legal system. We review computer principles as they impact forensic investigations; describe a proper forensic investigation; and advise interested parties, such as attorneys and information technology staff, of what they can do to secure the best results from a forensic investigation of computer media. |
![]() |
![]() |
Locating the Right Computer Forensics ProviderIf a client suspects that his case may involve evidence located on a computer, the representing attorney should look for a computer forensics company that can assist in all stages of building the case. |