From the course: Cybersecurity Foundations: Computer Forensics

Definition and goals of computer forensics

From the course: Cybersecurity Foundations: Computer Forensics

Start my 1-month free trial Buy for my team

Definition and goals of computer forensics

“

- [Instructor] The ultimate goal of computer forensics is to produce evidence for legal cases. You need to keep four objectives in mind to achieve this goal. The first objective is to prepare for an investigation by ensuring the integrity of the evidence. An example is write protecting your evidence media to avoid accidentally writing over it. The second objective is to acquire data, which includes duplicating your evidence to only work on the copy instead of the original media. Once your data is acquired, the next step is to analyze it. Conducting a search based on a keyword to find an incriminating piece of evidence is an excellent example of analyzing data. Finally, the last step is to identify evidence and present it as a written report. These reports can be autogenerated by your computer forensics tool, but you often have to edit them. When we accomplish these objectives of computer forensics, it's safe to allow investigators to submit their evidence.

Contents