What is computer forensics? What important practices are followed in computer forensics?

Q. What is computer forensics? What important practices are followed in computer forensics?

Answer =

Computer Forensics: - Digital forensics or computer forensics refers to methods used for Interpretation of computer media for digital evidence.

Or

Computer forensics is a systematic process that interprets electronic data for use in a court of law. The goal of the process is to preserve any evidence in its most original form while performing a structured investigation by collecting, identifying and validating the digital information for the purpose of reconstructing past events.

Computer Forensics follows the following practices:-

• Acquire the evidence without altering or damaging the original.
• Authenticate that your recovered evidence is the same as the originally seized data.
• Analyze the data without modifying it.

Digital Forensics investigation process:-

Data identification -> Project planning -> Data capture -> Data processing -> Data analysis -> Data display -> Report generation