Computer Forensic

Computer Forensic

Introduction

The computer forensics, also called computer forensics, computer forensics, digital forensics or digital forensics examination is the application of scientific techniques and specialized analytical technology infrastructure to identify, preserve, analyze and present data that are valid within a legal process.

These techniques include computer rebuild good, considering residual data, authentication data and explain the technical characteristics of the use applied to the data and information assets. As the above definition implies, this discipline does not just use technology to maintain the integrity of data and processing them, but also requires a specialized and advanced knowledge in computer and systems for power detected in any electronic device that has happened.

Their importance and to maintain its integrity is based on digital or electronic evidence is extremely fragile. Simply double-click to give a file would change the last access date thereof. Additionally, a digital forensic examiner, in the process of computer forensics can recover information that has been deleted from the operating system. It is important to mention that the computer forensics or computer forensics has no preventive part, i.e., computer forensics is not responsible for crime prevention, care for it that computer security is important to understand the framework for action between computer forensics, the computer security and computer audit.

The Computer Forensics is emerging as an auxiliary discipline of modern justice, to address the challenges and techniques of computer criminals, also a guarantor of the truth surrounding the digital character evidence, which is much more susceptible to alteration and /or modifications precisely because of the connotation that according to the convenience and everyday is assigned, but could eventually provide as evidence in legal proceedings.

Description and Analysis

The computer (or computer) forensics is the science of acquire, preserve, collect and present data have been processed electronically and stored in a medium computational. The computer forensics then makes its appearance as a discipline Assistant modern justice, to meet the challenges and techniques computer intruders, and guarantor of the truth about the digital evidence that might contribute to a process.

By, computer forensics (computer forensics) we mean by discipline of forensic science, that considering the tasks associated with evidence, attempts to discover and interpret the information in the media computer to establish the facts and make assumptions related to the case, or as a scientific discipline and specialized understanding the elements of technology equipment computing provides an analysis of the data residing in these equipment. Forensics in networks (network forensics) It is a more complex scenario, it is necessary to understand the way protocols, configurations and infrastructure communications are combined to result in a moment specific time and a particular behavior. This combination of words provides a professional who understood the operations of the computer network is capable, following the forensic protocols and training, to establish trails, the movements and actions that an intruder has been developed to complete its share (Casey 2000, 90).

Unlike the definition of computer forensics, this context requires event correlation capabilities, often disjointed and random, in particular equipment is ...