A computer forensic investigator is trained in the field of handling and applying specialized tools to uncover sensitive computer data in computer systems and other electronic equipment. An investigator tries to determine the extent of a security breech, figuring out how the system was compromised and allowed an intruder in, identifying the damage, and potentially identifying the subject. The computer forensic investigator attempts to use a wide variety of tools and process to uncover electronic data from a computer system, whether the data is deleted, hidden, encrypted, or even if the computer system is damaged.
Published in Chapter:
Investigating Computer Forensics
Steve Brown (Capella University, USA)
Copyright: © 2008
|Pages: 6
DOI: 10.4018/978-1-59904-881-9.ch080
Abstract
Forensics is the application of sciences that help to seek out, examine, and answer questions about certain characteristics. For example, forensic toxicology helps us understand certain drug interactions, whereas forensics evidence helps us understand evidence that is uncovered at a crime scene. Since computers are now often used in criminal activity, a forensic branch of science has been created termed computer forensics. Unfortunately, unlike other forensics sciences, the complexity, legality, and even the nature of computer forensics may make it more vulnerable to errors.