Computer Forensics, also known as Digital Forensics, is a scientific examination

Question

Computer Forensics, also known as Digital Forensics, is a scientific examination by a certified computer forensic specialist, which includes the identification, collection, preservation and analysis of all forms of Electronically Stored Information (ESI).

What is CoC (Chain of Custody) and why is it important for evidence integrity?

What are the common situations in which forensics are used?

How a forensic investigation is typically approached?

Are there any actions that should be avoided during an investigation? 

Explanation / Answer

Evidence management can make or break a court case. Important files, DNA, photographs, and other information can corroborate a suspect’s testimony or disprove a defendant’s argument so the jury and other authorities involved can make a confident decision. However, when it comes to official law enforcement proceedings, even the tiniest slip can get evidence thrown out of court. If the wrong person accesses the information, takes too long to transfer it, mislabels it, or accidentally tampers with it in any way, vital evidence could be deemed inadmissible. This is why establishing and maintaining a clear Chain of Custody is key. At Tracker Products, our automated evidence management system can help you keep your data secure so you can successfully solve your cases.

A forensic investigation is typically approached very broadly, the main phases are sometimes considered to be:

Throughout the investigation, a full audit log of all your activities should be maintained and recorded. It is not unreasonable to include this in the report.

Related Questions

Navigate

• Browse (All)
• Browse C
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.