Forensic Analysis « IT Security Geeks

Unfortunately, there may come a time when you need to see what happened after the event, this is where computer forensic analysis comes into play.

Computer forensics is a branch of digital forensic science pertaining to legal evidence found in computers and digital storage media. The goal of computer forensics is to examine digital media in a forensically sound manner with the aim of preserving, recovering, analyzing and presenting facts and opinions about the information.

The times that computer forensics is required is usually down to one of the following reasons:

• You suspect an employee of violating company policy, but you need proof of this.
• Your organization has been compromised, and you need to understand how this happened, and how to stop it happening again
• You need to recover some data that was accidentally deleted, and not backed up.