Computer Forensics

Computer forensics, also called cyber forensics, is the application of computer investigation and analysis techniques to gather evidence suitable for presentation in a court of law. The goal of computer forensics is to perform a structured investigation while maintaining a documented chain of evidence to find out exactly what happened on a computer and who was responsible for it.

Computer forensic experts typically follow a standard set of procedures: After physically isolating the computer in question to make sure it cannot be accidentally contaminated, investigators make a digital copy of the hard drive. Once the original hard drive has been copied, it is locked in a safe or other secure storage facility to maintain its pristine condition. All investigation is done on the digital copy. Computer Forensics ensures that all digital data has been handled within the legal principles of security, continuity and accountability.

Investigators use a variety of techniques and proprietary forensic applications to examine the hard drive copy, data forensics ensures a quick and cost effective way to collect and preserve data or evidence that might have been deleted or become inaccessible through normal computing methods. By searching hidden folders and unallocated disk space for copies of deleted, encrypted, or damaged files, it can determined if certain information exists & if so where it might be located. Any evidence found on the digital copy is carefully documented in a "finding report" and verified with the original in preparation for legal proceedings.

Computer forensics UK and other countries like US, Germany, Ireland, Manchester & Scotland developed a first-class reputation for forensics within the IT, Police and Legal sectors. The workforce includes forensic, investigation, technical and legal professionals.