Computer forensics involves the extraction of data from an electronic device such as a computer, phone or tablet. Each step in the process is documented to ensure that the evidence obtained will be permissible in a court of law. The device/s will have to be physically isolated in order to avoid contamination of the evidence. An image of the hard drive or the electronic device’s memory is extracted. All the data is analysed from an electronic copy and inferences are drawn. The data extracted is write protected in order to safeguard the information’s integrity. Any findings made are incorporated into the report and the digital copies are used as annexures / exhibits.
Cyber Forensics
