Be A Computer Forensics Investigator

Digital forensics (sometimes Digital forensic science) is a branch of forensic science encompassing the recovery and investigation of material found in digital devices, often in relation to computer crime.[1][2] The term digital forensics was originally used as a synonym for computer forensics but has expanded to cover all devices capable of storing digital data and is now used to describe the entire field.[1] The discipline evolved in a haphazard manner during the 1990s and it was not until the early 2000s that national policies were created.

Evidence plays a vital role throughout criminal investigations. Typically, we think of evidence as things such as fingerprints, DNA, and fibers. However, evidence as evolved as the world of technology has expanded. Digital evidence also now plays just as much of an important role as traditional evidence. When beginning an investigation that involves digital evidence, it is important for the investigator to know what evidence to look for. Identification of evidence, collection including transportation of evidence and examination of evidence are the three main aspects of the process.

Behind every court case there’s a train of forensic science evidence and research. Forensic science is the application of scientific principles of criminal justice. In many court cases a forensic scientists is the one on the scene collecting finger prints, photos, blood samples and other evidence. Unfortunately one of the controversial issues in the forensic world is the evidence and its lack of verification of its reliability. In the field of forensics there are issues in finding proof in generating conclusion, fundamental knowledge to solve problems, and the whole false memory defense in the court. These issues can be solved in many ways like extensive research, preparation and training. These issues

Description: Computer forensics investigators may provide services, from investigating computer systems and data in order to present information for legal cases to help catch hackers and cyber criminals. They are the law enforcement agents in the cyber world. They also work closely with detectives to help convict criminals who have left a digital trail during their crimes.

Digital crime has been on the increase due to the increasing use of computer and internet. This has led the investigators with another method of fighting this crime. This is Computer Forensics, a process of going into computer hard drive and capturing basic information the user believed it has been erased.

Computer forensics refers to an area of knowledge that deals with the location, extraction, collection and analysis

Moving onto the weaknesses, the following test will examine the acquisition of information, discovery of information, education, procedure and significance of the evidence. One of the main concerns in this field is still acquiring the information in a way that does not jeopardize the integrity of the information despite having the appropriate tools. This is because digital forensic scientists created the tools for security and other computer related purposes and not for forensic purposes (Casey, 2004, p.29). This poses specific issues when the investigators are trying to collect information in a manner that is acceptable by law, and while it is true that it is possible to create tools specifically for forensic purposes

Supportive investigation procedures and protocols should be in place in order to show that the incriminating evidence was on the electronic media. Crime has changed since the dawning of the computer age and the need for digital forensics is growing rapidly. Digital forensics has various areas based on different standards and media types, each with experts. There have been major breakthroughs in digital forensics

Digital forensics has been responsible for putting away thousands and thousands of criminals. Ranging from simple crime computer crimes to child pornography. To get quality evidence that can be admissible in court there are steps that are needed in preparing a computer investigation. There are also requirements for data recovery, as well as procedures for corporate investigations. “Digital forensics has become prevalent because law enforcement recognizes that modern day life includes a variety of digital devices that can be exploited for criminal activity, not just computer systems. While computer forensics tends to focus on specific methods for extracting evidence from a particular platform, digital forensics must be modeled such that it can encompass all types of digital devices, including future digital technologies” (Reith, Carr, and Gunsch, 2002).

It is indisputable that the advancement in technology and knowledge has greatly improved the capability to catch criminals. Forensics of the past did not include the tools or knowledge that we now have. Although forensics is not a perfect science nor has it ever been, we are closer to perfecting it than ever. Every criminal leaves behind some traces of evidence; it is up to the professionals to find and analyze it to solve cases. Looking at the timeline of forensics technology of the past to the present it is evident that it has evolved dramatically and will continue to do so.

This manual is to assist forensic technicians who may be responsible for preserving electronic crime scene and recognizing, collecting, preserving, and storing digital evidence. When dealing with digital evidence, these principles apply: The process of collecting, securing, and transporting digital evidence should not change the evidence in anyway. Only trained forensic technicians specifically for digital evidence should conduct the analysis. Everything done during the search, seizure, transportation and the storage of the digital evidence should be documented, preserved and ready for review.

An extremely important computer forensic service is the preservation of evidence. In this step a forensic image is made of all pertinent data. This image is actually what is being analyzed and the original source where the data was extracted is put in a safe and confidential environment. The security and authenticity of this information is analyzed very carefully and handled only by a digital forensics expert.

Inept or unqualified individuals are not as knowledgeable with retrieval methods that are accessible using specialized forensics techniques. Dedicated forensics specialists are capable of creating bit-by-bit copy of a drive, without jeopardizing the integrity of data. Competent forensic investigators follow specific forensic methodology that has standard operating procedures for efficiently gather potential evidence (Cumming, n.d.). The goal of an investigation is to understand what happened, who did it, when, how, and why to prevent similar incidents from reoccurring. Dedicated forensic specialists can unearth these answers in a timely and efficient matter. Having dedicated forensics specialists’ means qualified individuals who get it right the first time, because in digital investigation you might not get a second

In a world where technology is increasingly becoming the way of life, it was only a matter of time before crime was no longer just in the streets but happening online as well. Criminals now get a new approach to carry out their crimes with the use of computers. Since technology is more like a murder mystery than catching the bad guy in the act, a new discipline of forensics needed to be put into place. This is known as computer forensics. Forensic science is any science used for the purpose of law. In the case of computer forensics it is “the discipline that combines elements of law and computer science to collect and analyze data from computer systems, networks, wireless communications, and storage devices in a way that is admissible as evidence in a court of law” (U.S. Cert, 2008). Meaning if you do something illegal on the Internet it can be found.

Until recently, forensic scientists needed only to study physical evidence to determine what had taken place at a crime scene. This consisted of gathering fibers and samples of any bodily fluids left behind and also taking note of every aspect of the crimes scene to determine what had happened. In today’s age, that is all still necessary for most crime scenes; however, there is a new frontier for criminals to commit illegal acts. This new frontier is the internet. Cyber-crime has become increasingly prevalent in recent years. This rise of new technology is forcing the field of forensic science to adapt in order to investigate cyber-crimes as well. With the advent of personal computers, the science of forensics has been forced to evolve with the times and as a result the field of digital forensics has developed. While many of the same principles can be applied, special considerations in regards to how the 4th Amendment of the Constitution applies to the practice of digital forensics must be taken.