24.2 – Approach and Process

24.2 – Approach and Process
Digital forensics includes the protection, identification, extraction, understanding, and documentation of digital evidence. The sector of digital forensics has different aspects and is not described by one particular process. At a very basic level, digital forensics is the investigation of information contained within and created with digital systems, usually in the interest of understanding what occurred, when it occurred, how it occurred, and who was involved. Digital evidence is found in servers, computers, smart phones, e-mail, tablets, external hard drives, USB flash drives and removable media. The digital forensics process includes: Acquisition Preservation Analysis Reporting         Acquisition:…
To access this content, you must subscribe to this General Subscription, or log in if you are a member.

Share this post