The simple definition of Computer Forensics is a technological, systematic inspection of the computer system and its contents for evidence or supportive evidence of a crime or other computer use that is being inspected.
Computer forensics requires specialized expertise that goes beyond normal data collection and preservation techniques available to end-users or system support personnel. One definition is analogous to "Electronic Evidentiary Recovery, known also as e-discovery, requires the proper tools and knowledge to meet the Court's criteria, whereas Computer Forensics is simply the application of computer investigation and analysis techniques in the interests of determining potential legal evidence.
Computer forensics experts investigate data storage devices, these include but are not limited to hard drives, portable data devices (USB Drives, External drives, Micro Drives and many more).
Computer forensics is done in a fashion that adheres to the standards of evidence that are admissible in a court of law. Some steps to identify sources of documentary or other digital evidence include:
- Preserve the evidence
- Analyze the evidence
- Present the findings
Please contact us below for more information.