To put it very basically, computer forensics is the gathering of information from a computer in order to determine certain facts. Typically the information gathered would not be seen by the average computer user. It could, for example, consist of deleted files, fragments of files or data and so on. Special tools and computer programs are used for this process and the job has to be carried out by a skilled expert who is specially trained for this kind of operation. The information gleaned from such an operation could be used by a fraud squad, for example, and may have to be used in evidence in a court of law. Forensic examination of a computer has to be carried out by a licensed investigator.

Tags: Computer Forensics

This entry was posted on Thursday, February 26th, 2009 at 10:47 am and is filed under Forensics. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.