Computer forensics is the collection, preservation, analysis, and presentation of computer-related evidence. The goal of computer forensics is to explain the current state of a digital artifact; such as a computer system, storage medium ( hard disk or CD-ROM), an electronic document (e.g. an email message or JPEG image). The scope of a forensic analysis can vary from simple information retrieval to reconstructing a series of events.
Computer foresnics is important because it will help ensure the overall integrity and survivability of your network infrastructure. Computer evidence can be useful in criminal cases, civil disputes, and human resources/employment proceedings. Computer forensics can often find evidence of, or even completely recover, lost or deleted information, even if it was intentionally deleted.
No comments:
Post a Comment