What is Digital/Computer Forensics

The Basics

Digital forensics, which is sometimes called computer or cyber forensics, involves the identification, collection, preservation, examination, and analysis of digital information that in turn becomes digital evidence. It is a technical, computer-related field that involves the collection and examination of evidence from computers, including audio, video and graphical images. Digital evidence is any information of probative value that is either stored or transmitted in a binary form, including digital audio and video.

The computer forensic examination is the process of locating, identifying, recovering, preserving, and analyzing digital data so it can be presented in a manner that can withstand close scrutiny or a legal challenge. A forensic examination of digital media goes far beyond normal data recovery techniques through tight controls and thorough documentation, and the results can be reproduced to authenticate their reliability. It is done objectively as a “truth” finding mission.