What is Computer Forensics and how does the process work?
A. Computer Forensics is the analysis of information contained within and created by computer systems. It is typically performed in the interest of figuring out what happened, when it happened, how it happened, and who was involved. The Certified Computer Forensics Investigator’s first step is to clearly determine the purpose and objective of the investigation. They will then take several careful steps to identify and extract all relevant data on a subject’s computer system. Computer forensic analysis will extract the data that can be viewed by the operating system, as well as data that is invisible to the operating system. During the forensic examination, the investigator will image, protect and preserve the evidence from any possible alteration, damage, data corruption, or virus introduction. Our examiners make the assumption that every case or situation could end up in the legal system. Therefore, it is their role to ensure evidence is not damaged, tainted or in any other way render
