Computer forensics pertains to legal evidence found in computers and digital storage media. The goal of computer forensics is to examine digital media by identifying, preserving, recovering, analyzing and presenting facts and opinions about the digital information. It is usually associated with the investigation of a major world wide computer crime, computer forensics are often used in civil proceedings. Computer forensics recovers data but with guidelines made to create a legal audit trial. Evidence from computer forensic investigations has been used in a number of high profile cases and is becoming very reliable within the U.S and European court systems.
The purpose of computer forensics techniques is to search, preserve and analyze information on computer systems to find potential evidence for a trial. Just opening a computer file changes the file -- the computer records the time and date it was accessed on the file itself. If detectives seize a computer and then start opening files, there's no way to tell for sure that they didn't change anything. Lawyers can contest the validity of the evidence when the case goes to court. Computers are getting more powerful, so the field of computer forensics must constantly evolve.
http://computer.howstuffworks.com/computer-forensic.htm
http://en.wikipedia.org/wiki/Computer_forensics
No comments:
Post a Comment