Computer Forensics

Thinking of starting your career in the Computer Forensics?

Then you have landed in the right place.

The overall aim of this crash course Computer Forensics is to explore and examine key concepts, methods and techniques used in understanding and applying Computer Forensics thoroughly. Establish, develop, manage, and evaluate the forensics baseline.

Book Description

The recent proliferation of the Internet and World Wide Web has undoubtedly increased the need for the computer investigations. Digital devices including computers, PDAs, and mobile phones are now used widely for committing the crimes. In addition, these devices store highly valuable and sensitive data such as the crime records, e-mails, corporate embezzlement, company policy violations, data about the murders, leaks of the intellectual property and terrorist activities. Investigators, attorneys, government bodies, new media or even a suspicious spouse, they all are overly concerned with finding out what was sent over the Internet, what is stored on the backup drives and logs, and dying to know particular information on the individuals responsible for these activities.

Computer forensics involves the:
- Identification
- Collection
- Preservation
- Examination, and
- Analysis of digital information

The fundamental goal of the computer forensics revolves around the mining of the data to find who is responsible for what. When was the act committed, by whom and exactly where? Electronic evidence is thus critical in the investigation process and can be one's best alibi in the case of false accusation. Investigators are in the recent past, rummaging and scanning through petabytes and gigabytes of data to gather the relevant evidences.

Computer forensics help in:
- Identifying the inappropriate use of the computer systems
- Determining the security breach
- Detection of the disloyal employees
- Evidence for the disputed dismissals
- identifying the malicious files
- Theft of the information assets
- Forgeries of the corporate documents

Computer forensics support the Corporate Audit process (internal and external) in:
- Identifying the unnecessary waste, and abuse
- As an effective System of internal controls;
- Testing the reliability of the Financial Reporting;
- Compliance with the federal and regulatory laws;
- Detection of Fraud,

What Will You Learn?

You will learn the following after reading the course book:

- A Simplified understanding of the forensic process
- Introduction to the investigation tools containing an apex of information for the reader interested in the field of computer forensics
- A well explained forensic acquisition/imaging process
- An understanding of the file system forensics.
- Important discussion about the data recovering, its practicality, importance and techniques required in recovering the data
- Mobile forensics and techniques for preserving the volatile evidence by further discussing the challenges in acquiring evidence from the mobile phones.