Join Jungwoo Ryoo for an in-depth discussion in this video Goals of computer forensics, part of Computer Forensics Essential Training.
- View Offline
- Exercise Files
To understand computer forensics you must know what it tries to accomplish. The ultimate goal of computer forensics is to produce evidence for legal cases, to achieve this ultimate goal there are some objectives you need to work on. The first objective is to prepare for an investigation. For example, write protecting your evidence drive is one of the ways to prepare for your investigation. The second objective is to acquire data. Acquiring data here means, simply making a copy of your evidence drive.
So that when you're doing your investigation, you only work on the copy of the evidence drive, rather than the evidence drive, itself. Once you have your data acquired, the next step is to analyze the data. Conducting a search based on a keyword, could be a good example of analyzing the data. Finally, the last step is to identify evidence and present it in the form of a written report. A lot of times these reports are auto generated by your computer forensics tool but you still have to edit this auto generated report, as a computer forensics investigator.
When these objectives of computer forensics are accomplished, it is safe to say that a computer forensics investigator is now ready to submit evidence.
- Understanding computer forensics
- Understanding partitioning
- Using a hex editor
- Preparing a target drive
- Acquiring data
- Ensuring data integrity with hashing
- Indexing and searching
- Generating a report
Skill Level Intermediate
Small Office Networking to Connect, Share, and Printwith Garrick Chow3h 23m Appropriate for all
Heartbleed Tactics for Small IT Shopswith David Gassner16m 43s Beginner
1. Understanding Computer Forensics
2. Preparing for a Computer Forensics Investigation
3. Preserving Data
4. Acquiring Data
5. Analyzing Data
Next steps1m 1s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.