Computer forensics is the practice of collecting, analysing and reporting on digital information in a way that is legally admissible. It can be used in the detection and prevention of crime and in any dispute where evidence is stored digitally. Computer forensics follows a similar process to other forensic disciplines, and faces similar issues.

1. ©D3

2. 1
•VERIFICATION
2
•SYSTEM DESCRIPTION
3
•EVIDENCE ACQUISITION
4
•DATA RECOVERY
©D3

3. 5 •TIMELINE ANALYSIS
6 •MEDIA AND ARTIFACT ANALYSIS
7 •STRING OR BYTE SEARCH
8
•REPORTING RESULTS
©D3

4. Sorce :
SANS and NIST
For More:
Facebook.com/D3kumar
©D3