Computer Forensics – A Brief Description
Computer Forensics is the function of utilising scientifically proven methods to assemble together and process data found on a digital device, (computer, hard disk drive, mobile phone, memory card etc), and interpret that data for possible use in a court of law or other theatre of investigation. The evidence may assist in the prosecution or a criminal, help in the defence of an accused person, or be of intelligence to an individual who is seeking knowledge for either personal or professional reasons.
The main users of Computer Forensics are law enforcement officers, as a large percentage of crimes in some way utilise digitally stored data. This data could be a phone call made on a mobile phone, (or cell phone), which could place an individual at the scene of a crime, (or of course away from it), accounts for illegal activities such as drug sales, images of paedophilia, human resource issues, hacking, email abuse, unauthorised data duplication, IP theft etc. Corporate organisations are utilising computer forensics more and more now as they often have to investigate incidents such as inappropriate computer use, inappropriate email use, unauthorised data duplication and disloyal employees. Human Resource departments and Internal Security are the biggest users of these specialist corporate services. Private individuals may also use these services. It may be the lover cheating on their partner, or inappropriate internet use by a family member.
Computer Forensics or Cyber Forensics as it is also known, is now taught at many colleges and universities around the world, and is available to both the law enforcement community and private individuals.
What to do if you suspect illegal or inappropriate activity on a computer or digital device:
1. Turn the power off – Pull the plug out if necessary
2. Secure the ‘exhibit’. Don’t allow anyone access to it, security seal it if possible
3. Contact a Computer Forensics Expert
What NOT to do if you suspect illegal or inappropriate activity on a computer or digital device:
1. Call your IT manager, or one of your technical staff
2. Get them to ‘see’ if the user has been looking at ‘dodgy’ websites or if any important files are missing
3. Sack the member of staff
The analogy of the above:
Imaging a body lying in a muddy field. There is a blanket over the body and something petruding from it. By not following procedures, what you will have done is the same as follows:
1. See the body
2. Walk up to the body in the field
3. Take the blanket off the body
4. Move the body to ‘have a look’
5. Put the blanket back over the body – ‘like it was before’
6. Leave the field
What you have just done:
Entered the scene of a crime, left YOUR footprints all over the muddy field, left YOUR fingerprints on the body and blanket, left YOUR DNA all over the place.
You then expect to call the relevant organisation/authority and have them try and find evidence, which has just been tainted by YOU or YOUR STAFF. This is not a good start, and could make the case in question inadmissible.
Remember that this is a very specialised service provided by experts. Use experts to do the job correctly in the first place, then there shouldn’t be a problem.
Simon Steggles
Disklabs Computer Forensics
www.disklabs.com/computer-forensics.asp
www.computer-forensics.co.uk
simon.steggles@disklabs.com
- Related Videos
- Related Articles
- Ask / Related Q&A
- Computer Forensics as a Way of Investigation
- Computer Forensics
- Crime-fighting With Computer Forensics
- Essential Duties and Responsibilities of a Computer Forensics Manager
- Computer Forensics - a Brief Introduction
- Solving Crime With Computer Forensics
- An Introduction to Computer Forensics
- Computer Forensics - Finding Out What The Bad Guys Did With Their Computers!




Home Based Business Start Up Plan
By: Rowell Hammer | 22/11/2009Online marketing is a puzzle to many would be online marketers. They have very little trouble settling on a online business but when it comes to marketing it successfully many times struggle. Marketing your internet business is not as hard as you might guess, it only takes a few steps of planning and pre-thought to be successful.
Cyber Stalking Facts
By: Nikkita Chan | 21/11/2009Cyberstalking is a recent form of criminal behavior involving persistent threats or unwanted attention using the Internet and other means of computer communications.
Video Game Systems Reveiw
By: Xavior | 20/11/2009Out of all the available Video Game Systems, the new Wii is the most addictive, intuitive and fun. They chose not to compete with Xbox 360 or PS3 , graphics wise and concentated on the Wii remote control, a fantastic motion-sensitive controller that can
Scalp Psoriasis Treatment Whats Your Best Option
By: Alton Buckland | 19/11/2009Scalp psoriasis is when the psoriasis appears on the scalp of the head, and it can either occur only on the scalp alone or the scalp and parts of the body as well. Scalp involvement is often accompani
What about file-sharing?
By: Janice Ton | 10/11/2009The term file-sharing refers to the sharing of computer data or space on a network. File-sharing allows multiple users to access the same file, giving the user the ability to read, modify, copy and/or print it.
Downloading in Canada!
By: Janice Ton | 10/11/2009Downloading copyrighted music from peer-to-peer networks is legal in Canada, although uploading files is not, Canadian copyright regulators said in a ruling released Friday.
Possible Offenses & Charges – Internet Identity Theft
By: Colin Daives | 27/10/2009Identity theft has been a crime for decades but the Internet has given criminals more options and raised more identity security issues. As a result, new laws are regularly passed in regards to online identity theft. If you've been charged with this type of crime, it's important to understand what you can expect.
Wills and Probate UK
By: Alex Hershmann | 15/10/2009Information about the process of granting probate in England and Wales
Sex, Spies and Hard-drives
By: Disklabs | 04/09/2007 | SecurityLots of Pornography found on second hand computer hard disk drives, and how easy it is to recover data from computers that are supposedly 'wiped'
How Floods Can Mean the End of your Data - But it Doesn’t Have Too
By: Disklabs | 04/09/2007 | TechnologyProvides information about flood damaged hard disk drives, and that its not the end of the data, should the data source get flooded.
Data Recovery - a Brief Introduction
By: Disklabs | 23/04/2007 | Data RecoveryA brief introduction in to Data Recovery
Computer Forensics - a Brief Introduction
By: Disklabs | 23/04/2007 | Cyber LawComputer forensics or computer investigations is a scientific way of investigating data on computers and other digitally stored media, (including mobile or cell phones, Personal Digital Assistants, (PDA's), memory cards, memory sticks, CD's, DVD's, Tapes and RAID systems
Cell Site Analysis - a Brief Introduction
By: Disklabs | 23/04/2007 | Cell PhonesExplaining how cell site analysis works. Cell site analysis can either prove or disprove the whereabouts of a cell phone or mobile phone at a specific time. This paper briefly explains how cell site analysis works.
Cell Phone Forensics - a Brief Introduction
By: Disklabs | 23/04/2007 | Cell PhonesA brief introduction into cell phone forensic, or mobile phone forensics by a world leader in this technology.