| Computer Forensics | | | | folders, unallocated spaces in disks, deleted messages, |
| Computer forensics or cyberforensics is a relatively | | | | damaged and encrypted files. |
| new discipline in the world of computer security. It is a | | | | In reporting phase, the computer forensic experts |
| type of investigation, wherein the cyber experts gather | | | | verify the findings, details with the original copy and |
| digital evidence and present it in the court. | | | | document it in the finding report. Computer forensics |
| | | | experts then present this report in the court for actual |
| Computer forensics investigators follow the | | | | litigation. |
| systematic procedures to seize the culprit. The | | | | Conclusion |
| procedure involves three phases for retrieving the | | | | Although, federal agencies use computer forensics to |
| proof from the computer system or any storage | | | | keep track and seize the terrorists or hackers, its use |
| medium. These phases include acquiring phase, | | | | in the private organizations have also increased |
| analyzing phase and reporting phase. | | | | tremendously. Individuals seek help of computer |
| Description Of Phases | | | | forensics in case of identity thefts, to prevent hacking |
| First, the computer forensic experts isolate the system | | | | of crucial information from security systems and so on. |
| so that evidence is not contaminated. Then they | | | | Computer forensics experts carry their investigation by |
| create a digital replica of the system's hard drive. | | | | trailing the computer criminals. However, locating such |
| After, making the replica of the hard drive, the experts | | | | criminals is not an easy task. With advancement in |
| lock it and store it safely in the secure storage to | | | | technology, online criminals have become more |
| maintain its accuracy. | | | | sophisticated and advanced. Therefore, computer |
| Thus, evidence collection is of utmost importance | | | | forensics experts are constantly creating and |
| because it helps in apprehending the culprit. | | | | upgrading their software to tackle and alleviate the |
| The analyzing phase comprises of using different | | | | computer crimes. Last thing to keep in mind is if it has |
| techniques and forensic applications to investigate or | | | | been built it can be broken. Ah technology isn't it grand! |
| study the hard copy. They search for any hidden files, | | | | |