Response to peers
Digital forensics is the process of uncovering and interpreting electronic data. The strategy aims to preserve any evidence in its most original form while performing a structured investigation by collecting, identifying, and validating the digital information to reconstruct past events. Digital forensic science is a forensic science branch that focuses on the recovery and investigation of material found in digital devices related to cybercrime. The term digital forensics was first used as a synonym for computer forensics. Since then, it has expanded to cover the investigation of any devices that can store digital data.
Although the first computer crime was reported in 1978, followed by the Florida computers act, it wasn’t until the 1990s that it became a recognized term (Sadiku, Tembely, & Musa, 2017). It was only in the early 21st century that national policies on digital forensics emerged. Digital forensics is the process of identifying, preserving, analyzing, and documenting digital evidence. It is done to present evidence in a court of law when required.
Digital forensics is a crucial aspect of internal investigations and can piece together a ‘hidden’ audit trail that can provide essential evidence. A forensic image preserves all data within a computer when it is taken. The quicker you image a digital device, the more chance you have to capture the data required for an investigator to piece together the evidence for you. Digital forensics can be implemented into a proactive risk management policy (Hewling, & Sant, 2012). Stating this in legislation that is visible company-wide can be a massive deterrent to those considering unauthorized activity. Having these provisions in place can satisfy several compliance requirements within standards and accreditations – ‘compliance by design.’
Digital forensics is the process of uncovering and interpreting electronic data. Determine the different ways in which an unauthorized user can physically and technically obtain information from your organization. Use the results of a tabletop exercise to execute countermeasures for generating/gathering potential digital evidence. The strategy aims to preserve any evidence in its most original form while performing a structured investigation by collecting, identifying, and validating the digital information to reconstruct past events.
References
Hewling, Moniphia & Sant, Paul. (2012). Digital Forensics: An integrated approach.