An Introduction to Computer Forensics

Computer Forensics is the process of investigatingchange.
electronic devices or computer media for the purposeComputer forensics got widespread attention during
of discovering and analyzing available, deleted, orthe Enron scandal widely believed to be the biggest
"hidden" information that may serve as useful evidencecomputer forensics investigation ever. Nowadays
in supporting both claims and defenses of a legalComputer Forensics & Electronic discovery is
matter as well as it can helpful when data have beenbecoming a standard part of litigation of all types,
accidentally deleted or lost due to hardware failure.especially large litigations involving corporate matters in
However, this is a very old technique but now it haswhich there are large amounts of data.
been changed a lot because of technologicalComputer forensics can be used to uncover a fraud,
advances, modern tools and software’s whichunauthorized use of a computer, violation of company
makes Computer Forensics much easier forpolicies, inadequate record keeping etc… by
Computer Forensic Experts to find & restore moretracking e-mails, chat-history, files, tapes, sites people
evidence/data faster and with more accuracy.browse or any other form of electronic
Computer forensics has change the way digitalcommunications.
evidence is gathered & used as evidence of a crimeData security is one of the biggest issues that the
& it is done using advanced techniques andcorporate world is facing now by publishing
technologies. A computer forensic expert uses thesecompany’s internet/policies & consequences for
techniques to discover evidence from an electronicviolations, signing of compliance documents by
storage device for a possible crime. The data can beemployees. Businesses can initiate monitoring their own
from any kind of electronic device like Pen drives,computer systems to avoid legal consequences in
discs, tapes, handhelds, PDAs, memory stick, Emails,future. Making employees aware that monitoring
logs, hidden or deleted files etc.software and Computer forensics personnel are
Most of us think that deleting a file or history willavailable could prevent workers from wrong doing.
remove it completely from the hard disk drive. In realty,With the use of computers in everyday life and
it only removes the file from the location but the actualincreasing amount of hi-tech crimes, Computer
file still remains on your computer. It is easier to trackforensics is a growing niche in the litigation support
what has been done on your computer but difficult tosector. Unlike many jobs in information technology
say by whom though it is possible to alter or delete thesector, chances are that computer forensics services
data completely from your storage device. It dependswill not be outsourced to other country because of the
on computer forensic expert’s skills how well heconfidentiality of the data business which will not allow
can find and restore the data without any loss orit to travel just to save a little cash.