Cyber Forensic Investigation

Cyber forensics is the practice of collecting, analysing and reporting on digital data in a way that is legally admissible. It can be used in the detection and prevention of crime and in any dispute where evidence is stored digitally. Cyber forensics follows a similar process to other forensic disciplines, and faces similar issues. Law enforcement agencies have been among the earliest and heaviest users of cyber forensics and consequently have often been at the forefront of developments in the field. Computers may constitute a ‘scene of a crime’, for example with hacking or denial of service attacks or they may hold evidence in the form of emails, internet history, documents or other files relevant to crimes such as murder, kidnap, fraud and drug trafficking. It is not just the content of emails, documents and other files which may be of interest to investigators but also the ‘metadata’ associated with those files. A cyber forensic examination may reveal when a document first appeared on a computer, when it was last edited, when it was last saved or printed and which user carried out these actions. More recently, commercial organizations have used cyber forensics to their benefit in a variety of cases as Data Recovery, Data Protection, Email Analysis, Image Recovery, Email Protection, System Protection, Employee Monitoring, Email Tracing, Fake Email ID’s & Social Networking account, Offensive content, Website/Email hacking, Any other crime involving the use of computers etc.