When you hear of computer forensics, the first thing on the mind can be a researcher at the crime scene, pulling the plastic sheet out of a computer and inspection for signs of a struggle. In fact, no one ever spoke of forensic medicine in everyday life until they started making Primetime police scientifically accurate, so of course, simple word association in general, leads to forensic science is "something that cops do, right? "
Indeed, the science behind computer forensics is not really very different from forensic science from the crime scene. In either case, the team of forensic experts or looking for a trail of evidence. In any case, the researcher analyzes what has happened, determines how that happened and notes that this could be responsible.
The main difference is that while a researcher at the scene of a robbery or violent crime is looking for physical evidence, computer forensic investigator is looking for digital evidence.
Curiously, the physical evidence can often be misleading, confusing, ambiguous and difficult to meet without the help of witness statements, digital evidence tends to occur in a much more direct.
A computer that keeps track of almost everything has been done with it. For example, in addition to their browsing history, there is also the temporary Internet folder, which stores information from the web on your computer. For example an employee is watching news all day when they are supposed to be working. Even if they are smart enough to clear your browser history, temporary Internet files may still be the evidence that will win them a warning.
That's just a very simple example, of course. Computer forensics addresses everything from cybercrime to the misconduct of employees, such mundane tasks as finding out why your antivirus is not working.
The point is that everything you do on a computer that leaves a mark. Delete a file from your hard drive is not the same as removing all evidence that they exist. Like all the rooms in your house have any DNA evidence, be it a hair, saliva, or cutting toenails, no matter how good vacuum and shampoo your carpets, there is some evidence that this is your home. The same is true with computers. You can not do anything on a computer without a computer expert to be able to find exactly what you've been doing.
One issue that many find confusing in regard to computer forensics ... and legal, is it really?
This depends on the context. Here's everything you need to know if you are thinking of hiring a team of computer forensics, but not sure if you can:
If you suspect an employee of breaking company policy or even break the law with a computer that belongs to the company, you have the right to take a look at the computer that has been working at any time.
It gets a bit more difficult when an employee is working on your own computer. This is not a dead end, but can be a bit more complicated. Luckily, there always have to look at his computer for evidence of what they have done on your computer. In any case, go ahead and call your people forensics, and you should be able to advise you on how far you can collect the evidence they need to take action.
In fact, computer forensics is simply the art of finding a trail of evidence on computers, plain and simple. You never know when you will have such services, so it's a good idea to keep in mind if ever.
Indeed, the science behind computer forensics is not really very different from forensic science from the crime scene. In either case, the team of forensic experts or looking for a trail of evidence. In any case, the researcher analyzes what has happened, determines how that happened and notes that this could be responsible.
The main difference is that while a researcher at the scene of a robbery or violent crime is looking for physical evidence, computer forensic investigator is looking for digital evidence.
Curiously, the physical evidence can often be misleading, confusing, ambiguous and difficult to meet without the help of witness statements, digital evidence tends to occur in a much more direct.
A computer that keeps track of almost everything has been done with it. For example, in addition to their browsing history, there is also the temporary Internet folder, which stores information from the web on your computer. For example an employee is watching news all day when they are supposed to be working. Even if they are smart enough to clear your browser history, temporary Internet files may still be the evidence that will win them a warning.
That's just a very simple example, of course. Computer forensics addresses everything from cybercrime to the misconduct of employees, such mundane tasks as finding out why your antivirus is not working.
The point is that everything you do on a computer that leaves a mark. Delete a file from your hard drive is not the same as removing all evidence that they exist. Like all the rooms in your house have any DNA evidence, be it a hair, saliva, or cutting toenails, no matter how good vacuum and shampoo your carpets, there is some evidence that this is your home. The same is true with computers. You can not do anything on a computer without a computer expert to be able to find exactly what you've been doing.
One issue that many find confusing in regard to computer forensics ... and legal, is it really?
This depends on the context. Here's everything you need to know if you are thinking of hiring a team of computer forensics, but not sure if you can:
If you suspect an employee of breaking company policy or even break the law with a computer that belongs to the company, you have the right to take a look at the computer that has been working at any time.
It gets a bit more difficult when an employee is working on your own computer. This is not a dead end, but can be a bit more complicated. Luckily, there always have to look at his computer for evidence of what they have done on your computer. In any case, go ahead and call your people forensics, and you should be able to advise you on how far you can collect the evidence they need to take action.
In fact, computer forensics is simply the art of finding a trail of evidence on computers, plain and simple. You never know when you will have such services, so it's a good idea to keep in mind if ever.
No comments:
Post a Comment