What is Digital Forensic?
Digital Forensics is the “process of identifying, preserving, analyzing and presenting digital evidence in a manner that is legally acceptable in any legal proceedings (i.e., a court of law).”
Why Digital Forensic?
- Digital Forensics Cyber incidents are fast moving and increasing in number and severity.
- When a cyber incident occurs, the attacked enterprise responds with a set of predetermined actions.
- Applying digital forensics to aid in the recovery and investigation of material on digital media and networks is one of these actions.
What are the responsibilities of the Forensic Analyst ?
- The role of the analyst is to recover data like documents, photos and e-mails from computer hard drives and other data storage devices, such as zip and flash drives, that have been deleted, damaged or otherwise manipulated.
- Analysts often work on cases involving offenses committed on the Internet ('cybercrime') and examine computers that may have been involved in other types of crime in order to find evidence of illegal activity.
- As an information security professional, a computer forensic analyst may also use their expertise in a corporate setting to protect computers from infiltration, determine how a computer was broken into or recover lost files.