Skip to main content

What is Digital Forensics & Types of Digital Forensics



What is Digital Forensics?


Digital Forensics is defined as the process of preservation, identification, extraction, and documentation of computer evidence which can be used by the court of law. It is a science of finding evidence from digital media like a computer, mobile phone, server, or network. It provides the forensic team with the best techniques and tools to solve complicated digital-related cases.Digital Forensics helps the forensic team to analyzes, inspect, identifies, and preserve the digital evidence residing on various types of electronic devices.

Objectives of Computer Forensics.

  • It helps to recover, analyze, and preserve computer and related materials in such a manner that it helps the investigation agency to present them as evidence in a court of law.
  • It helps to postulate the motive behind the crime and identity of the main culprit.
  • Designing procedures at a suspected crime scene which helps you to ensure that the digital evidence obtained is not corrupted.
  • Data acquisition and duplication: Recovering deleted files and deleted partitions from digital media to extract the evidence and validate them.
  • Helps you to identify the evidence quickly, and also allows you to estimate the potential impact of the malicious activity on the victim
  • Producing a computer forensic report which offers a complete report on the investigation process.
  • Preserving the evidence by following the chain of custody.

Process of Digital Forensics.

  • Identification
  • Preservation
  • Extraction
  • Interpretation
  • Documentation
  • Presentation       

Types of Digital Forensics.

Various types of Computer Forensics | Download Scientific Diagram

  • Computer Forensics
  • Disc Forensics
  • Wireless Forensics
  • Network Forensics
  • Database Forensics
  • Forensics Data Analysis
  • Mobile Device Forensics
  • IOT Forensics
  • Cloud Forensics

Challenges faced in Digital Forensics.
  • The increase of PC's and extensive use of internet access
  • Easy availability of hacking tools
  • Lack of physical evidence makes prosecution difficult.
  • The large amount of storage space into Terabytes that makes this investigation job difficult.
  • Any technological changes require an upgrade or changes to solutions.

Advantages of Digital forensics.

  • To ensure the integrity of the computer system.
  • To produce evidence in the court, which can lead to the punishment of the culprit.
  • Efficiently tracks down cyber criminals from anywhere in the world.
  • Helps to protect the organization's money and valuable time.

Disadvantages of Digital Forensics.

  • Digital evidence accepted into court. However, it is must be proved that there is no tampering
  • Producing electronic records and storing them is an extremely costly affair
  • Legal practitioners must have extensive computer knowledge
  • Need to produce authentic and convincing evidence
     

Comments

Popular posts from this blog

What is Vishing? Tips for Spotting and Avoiding Vishing.

"When your phone rings, it’s sometimes hard to know who’ll be on the other end. It might be someone vishing. " Vishing, a combination of ‘voice’ and ‘phishing,’ is a phone scam designed to get you to share personal information. Here's what to know about vishing attacks and how to help protect yourself. What is Vishing? During a vishing phone call, a scammer uses social engineering to get you to share personal information and financial details, such as account numbers and passwords. The scammer might say your account has been compromised, claim to represent your bank or law enforcement, or offer to help you install software. Warning: It's probably malware. Vishing is just one form of phishing, which is any type of message — such as an email, text, phone call or direct-chat message — that appears to be from a trusted source, but isn’t. The goal is to steal someone's identity or money. It’s getting easier to contact more people, too. Scammers can place...

What is Cross-Site Scripting.

What is Cross-Site Scripting Attack :- Cross-site scripting, or XSS, involve a website including unintended Javascript code which is subsequently passes on to users who then execute that code via their browsers. A harmless example of this is :- alert(‘XSS’) Cross-Site Scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites. XSS attacks occur when an attacker uses a web application to send malicious code, generally in the form of a browser side script, to a different end user. Flaws that allow these attacks to succeed are quite widespread and occur anywhere a web application uses input from a user within the output it generates without validating or encoding it. An attacker can use XSS to send a malicious script to an unsuspecting user. The end user’s browser has no way to know that the script should not be trusted, and will execute the script. Because it thinks the script came from a trusted source, ...

What is Penetration Testing? The Importance of Penetration Testing

“ What is penetration testing? ” Penetration testing is a complex process that involves testing applications for security vulnerabilities. Easier said than done, penetration testing has become a major part of ethical hacking. People with above ordinary hacking skills hoping to make a living out of them legally are applying for penetration tester positions across a host of different companies.  Importance of Penetration Testing:- 1.      Big companies throughout the world rely on ethical hacking methods and penetration testing to give them results in terms of their security deficiencies. Is a company’s security policy in line with requirements? This question is best answered through conducting penetration tests. 2.      Penetration tests can be used to confront and catch hackers before they cause the damage. It has been seen that a lot of companies spend resources on damage control, whereas it would be better if they followed an...