What Is Computer Forensics?
Investigations, wether they be for legal or informational reasons, can be put into one of two catagories that will influence how you apporach the situation. In some cases the event used the computer as a tool, in other cases the computer was the focus of the event.
Example: Someone storing illegal materials and having chats with cohorts is when the computer is the object in use. An attacker breaching a host and uploading keylogger software is an example of the computer being attacked. In either case, what you are looking for changes your selection of tools and techniques.
Are you looking for evidence or an explaination of an occurance?
This article presents a few other good points in describing the goals and objectives of computer forensics.
CyberSecurity Institute: What Is Computer Forensics?
Example: Someone storing illegal materials and having chats with cohorts is when the computer is the object in use. An attacker breaching a host and uploading keylogger software is an example of the computer being attacked. In either case, what you are looking for changes your selection of tools and techniques.
Are you looking for evidence or an explaination of an occurance?
This article presents a few other good points in describing the goals and objectives of computer forensics.
CyberSecurity Institute: What Is Computer Forensics?
