What is Digital Forensics ?

 

Digital forensics is the recovery and investigation of material found in digital devices. It is most often used in cybercrime situations. It is a science of finding evidence from digital media like computer, moil, pone, server or network.

Using the data collected from electronic devices, digital forensic investigators can stop hackers and other cyber criminals. The field is spread across a number of subdivisions such as Computer forensics, network forensics, forensics data analysis, mobile device forensics.

Computer Forensics 

There are various types f computer forensic examinations. some of the main types include the following ,

1. Database forensics :The examination of information contained in databases, both data and related metadata.

2. Malware forensics : Malicious programs and analyzing their payload. Such programs may include Trojan horses, ransomware or different viruses.

3. Email forensics : the recovery and analysis of emails and other information contained in email platforms, such as schedules and contacts.

4. Network forensics : Looking for evidence by monitoring network traffic, using tools such as a firewall or intrusion detection systems.

5. Memory forensics: Collecting information stored in a computer's RAM and cache.

6. Mobile forensics : The examination of mobile devices to retrieve and analyze the information including contacts, incoming and outgoing text messages, pictures and video files.

 A digital forensic investigation is used for

• Identifying the cause and possible intent of a cyber attack.
• Searching for data access.
• Safeguarding digital evidence used the attack before it becomes obsolete.
• Increasing security hygiene and finding hacker tools. 

 Conclusion

Different types of tools are used in digital forensics.