|
|
|
|
Computer forensics uses established and accepted computer science techniques to perform a forensically sound, and systematic inspection of electronic media for potential evidence.A computer forensics examination must be performed in a manner where all evidence, exculpatory or incriminating, is reviewed and none is overlooked, ignored, or destroyed.Evidence collected for computer forensics examinations must be handled properly and preserved according to sound chain-of-custody methodologies.Evidence from a computer forensics examination must be admissible in court, so strict guidelines are observed with respect to media sanitization and examiners use validation tools that insure that a forensically sound “bit for bit” copy is used to perform the examination.Computer forensics personnel require specialized expertise that goes beyond normal data collection and preservation techniques. Additional responsibilities rest on the computer forensic examiner, which are typically outside the scope system support personnel.Computer forensics is a highly specialized discipline. Rely on the expertise of DeliveredDATA. |
|
|