Forensic Computing and its Field of Activity

Technology
Apr 2021, Wed

Some crimes committed in real life, such as fraud, theft, obstruction of justice, and deception, can also be committed in different ways in the virtual world. The activity of forensic computing begins here, working in areas such as finding the criminals who committed these crimes, accessing and uncovering crime evidence. Throughout the meticulously conducted forensic computing process, all work must be carried out carefully, and evidence that is attempted to be destroyed must be accessed. To learn about the fields of forensic computing crimes and to benefit from the preventive measures that can be taken to prevent these crimes, you can visit the address. Based on this evidence, criminals are identified and the necessary penalties are imposed. To conduct the necessary examinations, investigations begin on electronic devices seized by court order, along with the research topics specified by the prosecutor's office.

Forensic Computing Examination Process

There are 4 basic methods in Forensic Computing Examination. These are:

Identification: In this process, potential data storage sources to be examined are identified and collected. These data can be listed as computers, hard disks, CDs, DVDs, USB disks, memory cards.
Examination: After obtaining exact copies of the data sources obtained in the identification stage, which is the first stage, all related research is carried out on these copies. Ensuring and protecting the data integrity of the examined evidence is essential. When working on evidence, it is healthier to work with a copy rather than the evidence itself, and since it will not cause any loss or damage to the original evidence, the work should be done on the copy.
Analysis: In this stage, data related to the subject matter is uncovered from the copies of the examined evidence.
Reporting: This is the stage where the presentation of the information reached in the analysis stage is prepared and made. Reporting should be prepared with clarity and language that those who read the report can understand and should include the evidence obtained.