Computer Forensics

Computer Forensics is a branch of science encompassing the recovery, analysis and presentation of evidence stored digitally, for use in court.

This form of evidence is stored on devices such as hard drives contained within computers, mobile phones, tablets, iPad’s, routers, networks, CCTV systems, and backup tapes.

In many cases an average computer user can retrieve a limited amount evidence of various kinds of activity on a computer. However data can be hidden, deleted, overwritten and in various ways obfuscated and special techniques need to be employed however in the case of hidden, deleted, overwritten and otherwise obfuscated data. Other techniques can also be employed to show proof even of data which no longer exists. For these reasons a trained computer forensics specialist is required to investigate.
Some information able to be recovered is ‘information about information’ which helps provide corroboration of events and assures higher levels of certainty that the conclusions reached by the examiner can be depended on.

It takes a trained specialist to investigate the digital information in a meticulous and thorough manner, and be able to present it admissible in a court of law.
Something about procedure