ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.

Difference between revisions of "Computer forensics"

From ForensicsWiki
Jump to: navigation, search
(adding content re definition and links)
m (External Links)
Line 8: Line 8:
*[ WikiCrimeLine Digital evidence]
*[ WikiCrimeLine Digital evidence]
*[ WikiCrimeLine]: Computer forensics
*[ WikiCrimeLine Computer forensics]

Revision as of 10:53, 25 May 2007

Computer forensics is the practice of identifying, extracting and considering evidence from digital media such as computer hard drives. Digital evidence is both fragile and volatile and requires the attention of a certified specialist to ensure that materials of evidentiary value can be effectively isolated and extracted in a scientific manner that will bear the scrutiny of a court of law. Computer forensics is not to be confused with the more generic term of 'forensic computing', which refers to the analysis and study of all types of digital media and materials - whether they be of a computing or telecommunication nature. Computer forensics, in a strict sense, applies specifically to the evaluation of computers and data storage or data processing devices.

External Links