A forensic expert examining a mobile device that was seized during an investigationMedia types used for computer forensic analysis: a Fujifilm FinePix digital camera, two flash memory cards, a USB flash drive, a 5GB iPod, a CD-R or DVD recordable, and a Mini CD.
Part of a series on
Forensic science
Physiological
Anthropology
Biology
Bloodstain pattern analysis
Dentistry
DNA phenotyping
DNA profiling
Forensic genealogy
Entomology
Epidemiology
Limnology
Medicine
Palynology
Pathology
Podiatry
Toxicology
Social
Psychiatry
Psychology
Psychotherapy
Social work
Criminalistics
Accounting
Body identification
Chemistry
Colorimetry
Election forensics
Facial reconstruction
Fingerprint analysis
Firearm examination
Footwear evidence
Forensic arts
Profiling
Gloveprint analysis
Palmprint analysis
Questioned document examination
Vein matching
Forensic geophysics
Forensic geology
Social network analysis
Digital forensics
Computer exams
Data analysis
Database study
Malware analysis
Mobile devices
Network analysis
Photography
Video analysis
Audio analysis
Related disciplines
Electrical engineering
Engineering
Fire investigation
Fire accelerant detection
Fractography
Linguistics
Materials engineering
Polymer engineering
Statistics
Traffic collision reconstruction
Related articles
Crime scene
CSI effect
Perry Mason syndrome
Pollen calendar
Skid mark
Trace evidence
Use of DNA in forensic entomology
Outline
Category
v
t
e
Computer forensics (also known as computer forensic science[1]) is a branch of digital forensic science pertaining to evidence found in computers and digital storage media. The goal of computer forensics is to examine digital media in a forensically sound manner with the aim of identifying, preserving, recovering, analyzing and presenting facts and opinions about the digital information.
Although it is most often associated with the investigation of a wide variety of computer crime, computer forensics may also be used in civil proceedings. The discipline involves similar techniques and principles to data recovery, but with additional guidelines and practices designed to create a legal audit trail.
Evidence from computer forensics investigations is usually subjected to the same guidelines and practices of other digital evidence. It has been used in a number of high-profile cases and is accepted as reliable within U.S. and European court systems.
^Cite error: The named reference noblett was invoked but never defined (see the help page).
and 26 Related for: Computer forensics information
Computerforensics (also known as computerforensic science) is a branch of digital forensic science pertaining to evidence found in computers and digital...
devices involved: computerforensics, network forensics, forensic data analysis, and mobile device forensics. The typical forensic process encompasses...
mainly focused on computerforensics, although in recent years similar tools have evolved for the field of mobile device forensics. This list includes...
non-profit organization Canadian Identification Society Computerforensics – Branch of digital forensic science Crime science – study of crime in order to...
Mobile device forensics is a branch of digital forensics relating to recovery of digital evidence or data from a mobile device under forensically sound conditions...
Network forensics is a sub-branch of digital forensics relating to the monitoring and analysis of computer network traffic for the purposes of information...
conducting a computerforensic examination", the employment of digital forensics good practice and methodologies in the investigation by computerforensics experts...
Forensic Toolkit, or FTK, is a computerforensics software originally developed by AccessData, an Exterro company. It scans a hard drive looking for various...
Forensic accounting, forensic accountancy or financial forensics is the specialty practice area of accounting that investigates whether firms engage in...
The Open ComputerForensics Architecture (OCFA) is a distributed open-source computerforensics framework used to analyze digital media within a digital...
products designed for forensic, cyber security, security analytics, and e-discovery use. EnCase is traditionally used in forensics to recover evidence from...
Dave Kleiman (22 January 1967 – 26 April 2013) was an American computerforensics expert, an author or co-author of multiple books and a frequent speaker...
Memory forensics is forensic analysis of a computer's memory dump. Its primary application is investigation of advanced computer attacks which are stealthy...
The Certified ForensicComputer Examiner (CFCE) credential was the first certification demonstrating competency in computerforensics in relation to Windows...
Rebecca Mercuri is a computer scientist specializing in computer security and computerforensics. She is considered a leading expert on electronic voting...
and online game hacking. His later work focused on computerforensics, physical memory forensics, malware detection, and attribution of hackers. He holds...
stochastic nature of modern computers. Unlike traditional computerforensics, which relies on digital artifacts, stochastic forensics does not require artifacts...
(IoC) in computerforensics is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion...
recognition is adding firms in fraud cases. Electronic data processing Computerforensics Data analysis Helpdesk and incident reporting auditing Change management...
Part 3". Forensic Magazine. Advantage Business Media. Dietz, Steven D. (15 September 2002). "Validation of IsoBuster v1.0" (PDF). digital-forensics.sans.org...
Forensic data analysis (FDA) is a branch of digital forensics. It examines structured data with regard to incidents of financial crime. The aim is to...
backup and recovery; duplicating a computer's configuration for mass deployment and for preserving data for digital forensics purposes. Drive cloning can be...
Forensic search is an emerging field of computerforensics. Forensic search focuses on user created data such as email files, cell phone records, office...
YARA is a tool primarily used in malware research and detection. It provides a rule-based approach to create descriptions of malware families based on...
their related metadata. The discipline is similar to computerforensics, following the normal forensic process and applying investigative techniques to database...
Global Information
