The application of computer technology for the purpose of examining potential evidence, including, but not limited to: theft of trade secrets; theft of, or destruction of property; and fraud. Specialists can recover data that has been deleted, encrypted, or damaged.
the collection, authentication, preservation, and examination of electronic information for presentation in court.
The application of computer investigation and analysis techniques to determine potential legal evidence.
The act of looking for and preserving digital evidence of a crime for eventual use in court. Computer forensics is just starting to get widespread attention in the computing community.
Computer forensics deals with the science of determining computer-related conduct - the who, what, when, where, and how of computer and technology use.
Computer forensics The simple definition of Computer Forensics, "... is the use of specialized techniques for recovery, authentication, and analysis of electronic data when a case involves issues relating to reconstruction of computer usage, examination of residual data, authentication of data by technical analysis or explanation of technical features of data and computer usage. Computer forensics requires specialized expertise that goes beyond normal data collection and preservation techniques available to end-users or system support personnel." (Kroll-OnTrack).
