CYBER CRIMES AND INVESTIGATION

Forensic Methods Used To Investigate Security Breaches

Introduction

The computer forensics, also called, digital forensics is the application of scientific techniques and specialized analytic technology infrastructure that identifies, preserves, analyzes and presents data that are legal within a legal process. These techniques include rebuilding the good computer, examining residual data, authentication of data and explaining the technical characteristics of the applied use of data and information assets. 

The definition above implies this discipline not only makes use of technology to maintain the integrity of data and processing them but also requires advanced expertise and knowledge in computer and systems to detect relates to the electronic device happenings. The importance of this and maintenance of their integrity is on the basis of the digital or electronic evidence which is extremely fragile. A digital forensic examiner, in the process of computer forensics, can recover information that gets deleted from the operating system.

Discussion

Computer forensics applies computer investigation and examination techniques that help in collecting proof regarding something that has happened on a computer and is to be preceded in a court of law (Bassett et al, 2006). Computer forensics needs a proportionate blend of technological skills, legal insight, and moral conduct. Computer forensics experts employ powerful software tools to expose data to be sorted through, and then must figure out the significant facts regarding how to present them in a court of law. Cyber crime rates are increasing and computer forensics can be regarded as a crucial discipline that has the command to obstruct the advancement of these cyber criminals (Claire, 2011). The objective of computer forensics can be defined as carrying out a prearranged investigation while keeping a record of chain of evidence to determine closely what happened on a computer and who was behind all this. The main concern of computer forensics is precision. Forensic practitioners should pursue firm guiding principles and uphold the uppermost principles of work ethic to attain precision because stress must be on evidential honesty and safety.

Every investigation requires an initial contact that serves as the basis for overall progress. The process will start by contacting the investigation officer for a possible investigation. After that, the investigating team will utilize any information provided by an Incident Response (IR) team (if provided). In most usual cases, the extracted information in this regard is the list of incident Point of Contacts, Incident Assessment, and an Incident Investigation Report (King, 2006). The provided details will be helpful for the investigating team to conduct the investigation. In case such details are not made available by an IR team then the investigating team should be ready to gather information from discussion to get adequate information to be able to lead a Preliminary Investigation Discussion meeting. This discussion will allow clients and managements to provide any recognizing ideas or facts, their requirements from the investigation, and tell about the computers that are to be investigated. The list of information is not confined to these descriptions only, but it enhances as much information is revealed to the ...