|
The simple definition of computer forensics is a
technological, systematic inspection of the computer system and its
contents for evidence or supportive evidence of a crime or other
computer use that is being inspected. Computer forensics requires
specialized expertise that goes beyond normal data collection and
preservation techniques available to end-users or system support
personnel. One definition is analogous to "Electronic Evidentiary
Recovery, known also as e-discovery, requires the proper tools and
knowledge to meet the Court's criteria, whereas Computer Forensics is
simply the application of computer investigation and analysis
techniques in the interests of determining potential legal evidence."
|