What is forensics
Computer forensics is the recovery and analysis of computer information through the use of specific forensic software, by a qualified analyst.
The computer data is recovered from a suspect's machine or network without actually changing the data in any way. This renders the information reliable and admissible in legal proceedings.
A computer forensic analyst should be able to present their findings in an understandable format and with integrity. Their professional credentials should also stand up to the scrutiny of a court or tribunal.
|