Difference between revisions of "Computer forensics"

From ForensicsWiki
Jump to: navigation, search
(adding content re definition and links)
m (Reverted edits by MacyMiles (talk) to last revision by Ron Barker)
(2 intermediate revisions by 2 users not shown)
Line 8: Line 8:
*[http://www.wikicrimeline.co.uk/index.php?title=Digital_evidence WikiCrimeLine Digital evidence]
*[http://www.wikicrimeline.co.uk/index.php?title=Digital_evidence WikiCrimeLine Digital evidence]
*[http://www.wikicrimeline.co.uk/index.php?title=Computer_forensics WikiCrimeLine]: Computer forensics
*[http://www.wikicrimeline.co.uk/index.php?title=Computer_forensics WikiCrimeLine Computer forensics]

Revision as of 06:48, 6 September 2011

Computer forensics is the practice of identifying, extracting and considering evidence from digital media such as computer hard drives. Digital evidence is both fragile and volatile and requires the attention of a certified specialist to ensure that materials of evidentiary value can be effectively isolated and extracted in a scientific manner that will bear the scrutiny of a court of law. Computer forensics is not to be confused with the more generic term of 'forensic computing', which refers to the analysis and study of all types of digital media and materials - whether they be of a computing or telecommunication nature. Computer forensics, in a strict sense, applies specifically to the evaluation of computers and data storage or data processing devices.

External Links