SSCP Systems Security Certified Practitioner All-in-One Exam Guide

Exploring Computer Forensics

Computer forensics is the science of examining and inspecting computer systems for evidence about an event or crime. The examination includes recovering data stored on or transmitted by any electronic device. The goal is to identify and recover evidence while ensuring that it is preserved so that it can be analyzed.

You’ve probably watched one of the CSI television shows where detectives use crime scene investigation (CSI) techniques to piece together the elements of a crime. Computer forensics use investigation techniques to try to piece together evidence to investigate computer abuse or computer crime.

First Responders and Preserving the Scene

Preserving the evidence is extremely important in a computer forensics ...