The Importance of Forensic Theory and Practice in Digital Forensics Research

University:
California State University, Northridge
Course:
CJS 102 | Introduction to Criminology and Justice Studies
Academic year:

2023
Views:

118

Pages:

2
Author:

Mahmoud M.

Intro to forensic science What is the importance of forensic theory and practice in digital forensics research? Digital forensics includes techniques for recovering and investigating digital evidence. It is the branch of forensic science that deals with the detection, collection, storage, analysis and presentation of numerical data or evidence. is intended to recreate the sequence of events that occurred at a crime scene. Recover digital data and media from any device including cell phones, laptops, hard drives, pen drives, floppy disks and more., store numeric data. We will now give a broad overview of what forensics is and how to use it. Digital Forensics revolves around the investigation of digital data collected from various digital sources. During the investigation, follow the procedure from time to time. A total of files were recorded and analyzed by cybercrime researchers. Also can be used as evidence in court. As cybercrime investigators are experts in the field of digital forensics number, they conduct investigative procedures and analyze digital data. In addition, they ensure the authenticity of the evidences. In this blog, we will focus on "What is digital forensics" and the different ways to investigate digital evidence. Different Types of Investigation Before we understand the steps of computer forensics, let's understand the different types of investigations mentioned below. There are two main types of investigations: 1. Civil investigation: including criminal investigation against the person. Government agencies handle all questions about citizens. Additionally, civil investigations are often referred to as criminal investigations, as they usually involve criminal matters. 2 .Personal Investigations: including investigations of business, office and organization related crimes. Any specific business violation will fall under category investigation. Private investigations are often called company investigations. Analysis: Identify importance, reconstruct traffic packets and draw conclusions based on observed evidence. Presentation: Summary and explanation of results. Incident Response: Initiate a response to a detected attack or intrusion by collecting data to identify and evaluate the event. Forensic network analysis, like any other forensic investigation, presents many challenges. The first challenge. Depending on the network configuration and security measures used by the sensor, the device may not be able to capture all the necessary information. To resolve this issue, network administrators must use port of network devices in different parts of the network. A tedious task in cyber forensics is data correlation. Data dependencies can be causal or temporary.