Computer Forensics World

Introduction

As is often the case with security compromises, it's not a matter of if your company will be compromises, but when.

Computer forensics is the preservation, identification, extraction, interpretation , and documentation of computer evidence. Often digital forensics is referred to as "the scientific acquisition, analysis, and preservation of data contained in electronic media whose information can be used as evidence in a court of law."

Cyber activity has become an important part of the every day lives of the general public. According to the EC-Council, eighty-five percent of businesses and government agencies have detected a security breach. The Examination of digital evidence has provided a medium for forensic investigators to focus on after an incident has occurred. The ultimate goal of a computer forensic investigator is to determine the nature and events concerning the crime and to locate the perpetrator by following a structured investigative procedure.

Computer Forensic Flaws and Risks

Computer forensics is in its developmental stage. It differs from other forensic sciences as digital evidence is examined. There is a little theoretical knowledge to base assumptions for analysis and standard empirical hypothesis testing when carried out lacks proper training or standardization of tools, and lastly it is still more "art" than Science.

Here are some articles related to computer forensics.

Computer Forensic Lab
Forensic Act and Laws
Forensic Equipment
Forensic Software
Legal Issues
Real World Cases
Rules & Procedures