Computer Forensics & Electronic Discovery
"Computer forensics" and "electronic discovery" are terms used in the criminal investigation and litigation fields, where documents and files from computer and operating systems are used as evidence in a court proceeding.
Other People Are Reading
-
Computer Forensics
-
According to the U.S. Computer Emergency Readiness Team, known as U.S.-CERT, computer forensics is the process of collecting, analyzing and presenting evidence to a court of law. Computer forensics involves the discovery of data stored on a computer on hard disk drive and in other areas of a computer's memory system.
Electronic Discovery
-
The non-profit group AIIM's website reports Electronic Discovery is a term used during the first phase of litigation proceedings. Electronically stored information regarding the legal case is transferred between defendants and prosecutors, including files such as Word documents, spreadsheets and email.
-
Types
-
Computer forensics and electronic discovery involves the use of two types of data held on a computer, volatile data and persistent data. Volatile data is held in temporary files on a computer, and is lost if the computer system is turned off; persistent data is stored on a computer hard drive and remains there until it is deleted.
-
