Digital Forensics Lecture 1 Notes

Digital Forensics

A branch of forensic science that involves the recovery and investigation of material found in digital devices, often related to computer crime.

Chain of Custody

The documentation of the handling of evidence, ensuring that it remains intact and admissible in court.

Public Sector Investigations

Investigations conducted by government agencies related to criminal activities.

Private Sector Investigations

Investigations carried out by private companies addressing policy violations or attacks on corporate assets.

Incident Response

Actions taken to address and manage a cybersecurity incident to protect assets and contain the situation.

Vulnerability Assessment

The process of identifying and evaluating vulnerabilities in systems and networks.

Network Forensics

A branch of digital forensics that focuses on monitoring and analyzing computer network traffic to gather information about attacks.

Data Recovery

Retrieving lost, deleted, or corrupted data from storage devices.

Digital Evidence Specialist (DES)

A trained professional who assesses and analyzes digital evidence in investigations.

ISO 27,037

An information technology security standard related to digital evidence and forensics.

Forensic Software Tools

Applications or programs used for conducting digital investigations and analyzing digital evidence.

Evidence Drive

A storage medium used for copying and storing evidence collected during a digital investigation.

Acknowledgement of Evidence Form

A document that records the collection and management of evidence in an investigation.

Incident Detection

The identification of unauthorized activity or breaches in a network.

Assessment Process

The method of evaluating a case to understand its requirements and intricacies.

Standard Risk Assessment

The identification and evaluation of potential issues that could arise during an investigation.

Hash Values

Mathematical outputs used to verify the integrity of data in digital forensics.

Ethics in Digital Investigations

Principles guiding professional conduct in the collection and analysis of digital evidence.

Journal of Investigation

A record maintained by investigators detailing the steps and findings throughout an investigation.

Evidence Custody Form

A document that logs the handling of evidence from collection to analysis.