| |
|
|
Computer Forensics
|
ALSO CALLED: Cyberforensics, Forensic Analysis, Forensics, Security Forensics, and Digital Forensics
DEFINITION: Computer forensics, also called cyberforensics, is the application of computer investigation and analysis techniques to gather evidence suitable for presentation in a court of law. The goal of computer forensics is to perform a structured investigation while maintaining a documented chain of evidence to find out exactly what happened on a computer and who was responsible for it. Forensic investigators
Definition continues below.
|
|
| Recent Vendor Reports on Computer Forensics |
CSI for the CISO
| sponsored by Information Security Magazine
JOURNAL ARTICLE:
Don't trample evidence in a breach. Missteps in an investigation will cost you in court.
Posted: 06 Sep 2007 | Published: 01 Sep 2007
|
|  |
|
pwned
| sponsored by Information Security Magazine
JOURNAL ARTICLE:
Difficult to detect and nearly impossible to remove, rootkits may already own your systems.
Posted: 05 Sep 2007 | Published: 01 Sep 2007
|
|  |
|
Editor's Desk
| sponsored by Information Security Magazine
JOURNAL ARTICLE:
Kudos to the security community for its role in overturning the conviction of a Connecticut school teacher.
Posted: 03 Jul 2007 | Published: 01 Jul 2007
|
|  |
|
More than Meets the Eye
| sponsored by Information Security Magazine
JOURNAL ARTICLE:
You may think you're guarding your assets, but malicious insiders are using steganography to slip closely guarded company secrets out of your organization.
Posted: 07 Nov 2006 | Published: 01 Nov 2006
|
|  |
|
| |
COMPUTER FORENSICS DEFINITION (continued):
typically follow a standard set of procedures: After physically isolating the computer in question to make sure it cannot be accidentally contaminated, investigators make a digital copy of the hard drive. Once the original hard drive has been copied, it is locked in a safe or other secure storage facility to maintain its pristine condition. All investigation is done on the digital copy. Investigators use a variety of techniques and proprietary forensic applications to examine the hard drive copy, searching hidden folders and unallocated disk space for copies of deleted, encrypted, or damaged
Computer Forensics definition sponsored by SearchSecurity.com, powered by WhatIs.com an online computer dictionary
|
| |
|