Computer Forensics

Computers are primarily used conduct research and find out new information.  But they can also be used to commit computer-based crimes or violations.  Using a computer to commit a crime is also known as cyber forensics.  Computer forensics helps figure out who committed the crime by collection, preservation, analysis and presentation of computer-related evidence.  The goal of computer forensics is to use investigation techniques to analyze information from a computer device to solve the problem, who is responsible for the actions that were committed.

To be more accurate, investigators usually follow a specific procedure when conducting the investigation.  First, they isolate the computer device to make sure that no one can get access to the media and hack into it and change the evidence.  Therefore, the evidence will remain the same throughout the entire process.  Then they make a digital copy of the evidence so that it is safe and documented.  After it is copied onto a media device, they use this to perform the investigation.  The investigators use a multitude of proprietary software forensic applications to examine the digital copy, search hidden folders, and deleted or damaged files.  The evidence that is found is documented in a "finding folder" and verified with its original findings.  As crime rates continue to increase, computer forensics has become a huge area of scientific expertise which the investigators strive to make a better place for internet users.  It is mainly an issue because computers are becoming more powerful and they have hard drives that are capable of holding gigabytes and even terabytes of data.  This is frightening because detectives have to figure out a way to search for evidence without using too many resources in doing so.

http://searchsecurity.techtarget.com/definition/computer-forensics
http://www.howstuffworks.com/computer-forensic.htm