What Is Cyber Forensics?

Cyber forensics depends on computers.

Cyber forensics is a special area of forensics that focuses on computers and other electronic devices. Those working in the field must find data on the device, extract the data and preserve them. Many cyber forensics professionals work in the law enforcement or criminal justice fields.

Types

Cyber forensics generally falls into two categories---digital forensics and computer forensics. Computer forensics focuses on finding evidence, and digital forensics is the preservation and identification of the evidence.

Careers

Those specializing in cyber forensics work at the academia level as professors, for private businesses and in the military. Workers also work with law enforcement, such as the CIA and FBI.

The Process

Cyber forensics involves five separate areas. These areas include preserving the evidence, identifying the evidence, extracting or collecting the evidence from the device, documenting any evidence found and then interpreting that evidence and determining how it fits the crime. Interpretation is sometimes done in the courtroom.

References

• Nebraska Cert Conference: Cyber-Forensics: The Basics

Resources

• Cyber Forensics