Computer Forensics

What is Computer Forensics?

*Computer forensics is application of the scientific method to digital media in order to establish factual information for judicial review. This process often involves investigating computer systems to determine whether they are or have been used for illegal or unauthorized activities. Mostly, computer forensics experts investigate data storage devices, either fixed like hard disks or removable like compact disks and solid state devices.

Computer forensics experts:
Identify sources of documentary or other digital evidence
Preserve the evidence
Analyze the evidence
Present the findings

Computer forensics is done in a fashion that adheres to the standards of evidence that are admissible in a court of law.

*Source http://en.wikipedia.org/wiki/Computer_forensics