 | |
|
The computer digital forensics is basically a term in the computer science which is employed for obtaining the legal evidence from the media storage such as computer. With the help of computer forensics, an investigator can get the sensitive information such as when the last time the file or a document was edited or saved and which user has carried out these operations. In most of the times the investigators can tell how the crime was happened and how an individual can prevent it from happening next time. Here are some main reasons why we need computer forensics
• In order to gather the evidence from the media storage; this can be employed in court for solving a issue.
• In order to gather the evidence from the media storage; this can be employed in court for solving a issue.
• For analysing the strength of a network and fill security hole with fixes.
• For recovering the deleted files which were deleted due to software or hardware failure.
During computer forensic analysis it is very important to keep in mind that the original data should not be altered in any condition. It is the responsibility of the investigator to make sure that the data should not be altered. However, if anyone accesses the data a record should be maintained along with an explanation for accessing the data.
