Digital Forensics is concerned with investigating a device or data, especially in a court of law. Complex tools and techniques are used to recover information and data lost. racking digital activity allows investigators to connect cyber communications and digitally-stored information to physical evidence of criminal activity; computer forensics also allows investigators to uncover premeditated criminal intent and may aid in the prevention of future cyber crimes.

How to prepare for Digital Forensics?

Do not alter evidence by:

• Turning on or off the targeted device (leave it as it is).
• Do not try to investigate the device on your own (leave it as it is).
• Do not perform a disk image on your own (leave it as it is).

RESPECTING THESE 3 POINTS WILL MITIGATE LEGALE LIABILITY, UNWANTED DATA MANIPULATION, EVIDENCE CORRUPTION, ADDITIONAL COST AND TIME.

Digital forensics professionals must follow strict forensics processes and chain of custody in order for evidence to be presented at a court of justice.

What are the limitations?

• Data accessibility
• Data space
• Anti-forensics tools
• New technology
• Legal / Administration
• Misinformation
• Time