Chapter 15. Computer Forensics and Investigations

COMPUTER FORENSICS is the scientific process of collecting and examining data stored on, received from, or transmitted by an electronic device. It's a demanding area of study. New technologies that store data are created every day. People who choose to work in this area must constantly study these new technologies. They must learn how to collect and examine data from devices that use the new technology. Computer forensics is also a rapidly expanding profession. The U.S. Department of Labor estimates higher-than-average job growth for people in this career.1

This chapter introduces basic concepts about computer forensics. It also discusses the role of the computer forensic examiner. Finally, it reviews ...

Get Legal Issues in Information Security now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.