What Is Computer Forensics?


Quick Answer

Computer forensics is the analysis of information created and stored within computer systems with the objective of collecting computer evidence. A computer forensic investigator extracts and preserves digital data, which he then interprets during the forensic analysis. He finally presents an official report that can be used in court.

Continue Reading
Related Videos

Full Answer

A computer forensic investigator must document all the steps he followed during his investigation as part of his final report so that the courts can determine whether such evidence is admissible in court. He must be familiar with all the legal processes involved so that he can ensure the integrity of the data he collects. An investigator uses proprietary tools and technology to extract data from computer systems to uncover evidence of criminal activity. Using his equipment, he can even retrieve and access data that was previously deleted.

A computer forensic expert collects evidence used to assist in cases involving copyright infringement, sexual harassment, identity theft and money laundering. A victim must hire a forensic investigator as early as possible to increase his chances of obtaining usable evidence from the investigation.

A computer forensics investigation typically begins with a discussion of the potential crime, after which the investigator harvests all electronic data and identifies any violations. He protects and confirms any verifiable evidence, which he presents in his final report.

Learn more about Careers

Related Questions