Information Systems homework help

Digital Forensics

There are three primary goals with digital forensics:

Get Your Custom Essay Written From Scratch
We have worked on a similar problem. If you need help click order now button and submit your assignment instructions.
Just from $13/Page
Order Now
  1. Collect electronically stored information in a sound, defensible manner,
  2. Analyze the results of the collections, and
  3. Present the findings either in formal legal proceedings or less formally to inform a client.
  • Electronic evidence can be short-lived and fragile. It needs to be collected in a defensible, methodological manner to preserve it accurately, and to withstand scrutiny in legal proceedings. (chain of custody)
  • Electronic evidence can be highly probative, both as it appears to users, and behind the scenes. There is a lot of information that a computer user never sees (e.g. metadata, logs, registry entries). This behind-the-scenes evidence may provide a wealth of information about who did what when and where. Forensic analysts are trained to preserve, collect and interpret this kind of evidence.
  • Some digital files can be recovered, even if a user has tried to delete them.