It takes a much deeper level of investigation by the cyber forensic experts to unearth them. Latent Data: Latent data, also known as ambient data, is not easily seen or accessible upon first glance at the scene of a Cyber-crime by an expert.
This type of data includes chats, a simple list of files, files organized under directory or catalogue structure, backup tapes, entire hard drives. This is the easiest type of data.Īrchival Data: Archival data is a collection of data that has been moved to a storage media (Like cloud) for backup and storage. The data or information readily accessible to users includes word files, spread sheets, images, databases, email-messages, program files, system files or files used by the operating system. This type of data is easily noticeable and can be obtained without using any restoration process. In a crime scene cyber forensics is mainly concerned with three types of data and they are as follows (as said by (New York Computer Forensics).Īctive Data: Active data is the data available on the computer system. Special skill, practice, and tools are essential for obtaining this type of evidence. This may comprise items like fragments of data that can be found in the space allocated for existing files and deleted files from the computer system, which can only be known by a cyber-forensics expert. Mostly, the data collected during a cyber-forensic investigation is not easily available or seen by a common computer user.
Thus, a formal definition of cyber forensics is:Ĭyber Forensics is the science of examining, analysing and reporting electronic evidence collected from computers, networks, wireless communication and storage devices.” or in other words “We define cyber forensics as the discipline that combines elements of law and computer science to collect and analyse data from computer systems, networks, wireless communications, and storage devices in a way that is admissible as evidence in a court of law by. Latent evidence can take many forms, from fingerprints left on a window to DNA evidence recovered from blood stains to the files on a hard drive as per An Introduction to Computer Forensics-Infosec Resource. Forensics deals primarily with the recovery and examination of latent evidence. Forensics means using some sort of scientific process for the collection, analysis, and presentation of the evidence which has been collected. Cyber is a prefix used to describe, a person, a thing or any idea related to computers and the internet.
0 kommentar(er)
