12.IND Lecture Notes - Lecture 11: Data Corruption, Email, Data Recovery
13 Jan 2018
School
Course
Professor
Document Summary
Computer forensics is the process of methodically examining computer media (hard disks, diskettes, tapes, etc. ) for evidence. In other words, computer forensics is the collection, preservation, analysis, and presentation of computer-related evidence. Computer forensics also referred to as computer forensic analysis, electronic discovery, electronic evidence discovery, digital discovery, data recovery, data discovery, computer analysis, and computer examination. Computer evidence can be useful in criminal cases, civil disputes, and human resources/ employment proceedings. Recovering deleted files such as documents, graphics, and photos. Searching unallocated space on the hard drive, places where an abundance of data often resides. Tracing artifacts, those tidbits of data left behind by the operating system. Our experts know how to find these artifacts and, more importantly, they know how to evaluate the value of the information they find. Processing hidden files files that are not visible or accessible to the user that contain past usage information.
