What are Computer Forensics and how does the process work work?
A. Computer Forensics is the analysis of information contained within and created with computer systems, typically in the interest of figuring out what happened, when it happened, how it happened, and who was involved. This being said, computer forensic techniques and methodologies are used for conducting investigations – again, in the interest of figuring out what happened, when it happened, how it happened, and who was involved. The Certified Computer Forensics Investigators first step is to clearly determine the purpose and objective of this Investigation. Then they will take several careful steps to identify and extract all relevant data on a subjects computer system. Forensic analysis will extract the data that can be viewed by the operating system, as well as data that is invisible to the operating system. Image, protect and preserve the evidence during the forensic examination from any possible alteration, damage, data corruption, or virus introduction insuring evidence is not d
