Computer forensics in crime investigation

What is computer forensics?

• It is an attempt to expose, alter, destabilize, destroy, remove to gain unauthorized access or use an asset.

• It is the discipline that combines the elements of law and computer science to collect and analyze data from computer Systems, network, Wireless communications and storage devices in a way that is admisible as evidence in a court of law.

What are the examples of latent data? choose 3.

• Belkasoft Live RAM capturer

• Information that is in the computer's storage but is not easily mentioned in the file allocation tables.

• Data that has been deliberately removed.

• Information that the operating System or commonly used software Application cannot easily see.

1. A _______ has occurred, collecting all relevant evidence is of the utmost importance in answering the questions described above.

• file headers.

• forensic investigator.

• cyber attack.

What are the main types of computer forensics?

• Of operating Systems

• Of security

• Of network.

• On the cloud.

• On Mobile devices

It is the process of retrieving useful Information from the computer or mobile device in questions.

• Of network

• On the cloud

• Of operating Systems

It aims to retrieve digital evidence or relevant data from a mobile device in a way that preserves the evidence in a sound forensic condition.

• On the cloud

• Of operating Systems

• On mobile devices

It refers to the collection, monitoring, and analysis of network activities to discover the source of attacks, viruses, intrusions, or security breaches that occur On a network or in network traffic.

• On the cloud

• On mobile devices

• Of operating Systems

• Of network

Refers to any technique, device or software designed to hinder a computer investigation.

• Anti-forensic computing.

• Encryption.

• File headers.

Focuses primarily On gathering digital forensic Information from a cloud infrastructure.

• On mobile devices.

• On the cloud.

• FTK Imager

You use a complex set of rules called an algorithm to make data unreadable.

• Encryption

• Metadata

• Computer forensic analysis