DIGITAL FORENSIC 2 
DIGITAL
FORENSIC
Dr. Rakish
DIGITAL FORENSIC
Digital Forensic Science (DFS):
“The use of scientifically derived and proven methods toward the preservation, collection, validation, identification, analysis, interpretation, documentation and presentation of digital evidence derived from digital sources for the purpose of facilitating or furthering the reconstruction of events found to be criminal, or helping to anticipate unauthorized actions shown to be disruptive to planned operations.”
Course Overview
Digital forensics is a maturing scientific field with many sub-disciplines.
Computer forensics
• The goal of computer forensics is to explain the current state of a digital artifact; such as a computer system, storage medium or electronic document. The discipline usually covers computers, embedded systems (digital devices with rudimentary computing power and onboard memory) and static memory (such as USB pen drives).
• Computer forensics can deal with a broad range of information; from logs (such as internet history) through to the actual files on the drive.
Mobile device forensics
Mobile device forensics is a sub-branch of digital forensics relating to recovery of digital evidence or data from a mobile device.
It differs from Computer forensics in that a mobile device will have an inbuilt communication system (e.g. GSM) and, usually, proprietary storage mechanisms. Investigations usually focus on simple data such as call data and communications (SMS/Email) rather than in-depth recovery of deleted data.
Mobile devices are also useful for providing location information; either from inbuilt gps/location tracking or via cell site logs, which track the devices within their range.
Network forensics
Network forensics is concerned with the monitoring and analysis of computer network trafc, both local and WAN/internet, for the purposes of information gathering, evidence collection, or intrusion detection.
Forensic data analysis
Forensic Data Analysis is a
FORENSIC
Dr. Rakish
DIGITAL FORENSIC
Digital Forensic Science (DFS):
“The use of scientifically derived and proven methods toward the preservation, collection, validation, identification, analysis, interpretation, documentation and presentation of digital evidence derived from digital sources for the purpose of facilitating or furthering the reconstruction of events found to be criminal, or helping to anticipate unauthorized actions shown to be disruptive to planned operations.”
Course Overview
Digital forensics is a maturing scientific field with many sub-disciplines.
Computer forensics
• The goal of computer forensics is to explain the current state of a digital artifact; such as a computer system, storage medium or electronic document. The discipline usually covers computers, embedded systems (digital devices with rudimentary computing power and onboard memory) and static memory (such as USB pen drives).
• Computer forensics can deal with a broad range of information; from logs (such as internet history) through to the actual files on the drive.
Mobile device forensics
Mobile device forensics is a sub-branch of digital forensics relating to recovery of digital evidence or data from a mobile device.
It differs from Computer forensics in that a mobile device will have an inbuilt communication system (e.g. GSM) and, usually, proprietary storage mechanisms. Investigations usually focus on simple data such as call data and communications (SMS/Email) rather than in-depth recovery of deleted data.
Mobile devices are also useful for providing location information; either from inbuilt gps/location tracking or via cell site logs, which track the devices within their range.
Network forensics
Network forensics is concerned with the monitoring and analysis of computer network trafc, both local and WAN/internet, for the purposes of information gathering, evidence collection, or intrusion detection.
Forensic data analysis
Forensic Data Analysis is a