Hi All,
How Computer Forensics Works an insight will help.
Why do we call this Forensics and what can people do in computers 🙂
Thanks in advance
Computer forensics is related to legal evidence found in computers and digital storage media. The main purpose of it is to identifying, preserving, recovering, analyzing and presenting facts and opinions about the information. Today these information are accepted as reliable within US and European court systems.
There are number of techniques are used for the period of computer forensics investigations
· Cross-drive analysis
A forensic technique that correlates information found on multiple hard drives.
· Live analysis
The examination of computers from within the operating system using custom forensics or existing sys admin tools to extract evidence.
· Deleted files
 Use the recovery of deleted files
People find a lot of evidences through this process that related to many incidences.
