Forensics is a broad spectrum of sciences which involves collection and understanding of the data to answer the questions posed by the legal system. There are many forensic sciences and the forensic sceinces which in invovled for investigation of the digital media is known as digital forensics. The computer crimes such as hacking are dealt in digital forensics. Forensic analysis conducted in digital forensics, where the evidence regarding the cyber crime is collected and produced in the criminal court.
Digital forensics technically can be divided into 4 different categories as mentioned below: –
Computer Forensics – This is a category of the digital forensics the goal is to explain the present state of digital evidence such as electronic document or a computer system that was used for the crime. Under this category of digital forensics, the computers, embedded systems and static memory such as USB drives are taken to consideration. Under this category, the investigation is taken up with the help of the internet browsing history or even with the help of a spread sheet.
Nework forensics – The mission of this category of digital forensics is to have a check on the computer network traffic by monitering and analysing the internet. This helps to identify if there is any intrusion to the server and also in the collection of the evidence. The information at network forensics is in the packet level which is retained as legal evidence or filtered. This category of network foresics in highly volatile when compared to other categories of digital forensics.
Mobile device forensics – This is a sub branch of the digital forensics and is different from computer forensics. In this category, the digital data in the mobile devices are investigated for evidence. The investigations in this category are on the surface level like the investigation of the previous call data and other communications on the phone. In depth analysis of the data which is deleted is not given much importance in mobile device forensics. With the help of location trackers inbuilt in the phone, it gets easy for the cops to locate a particular person.
Database forensics – This is another category of the digital forensics where the investigations are held on the databases. In this category of investigation, the previous internet search data, and the data present in the Random Access Memory is taken to consideration. The purpose behind the collection of this data is to recover relavent information.
These categories of digital forensics are used in balance to prove justice in front of the legal system. There are several usesof this digital forensics.The logs or the personal information present on the computer can help the investigating team to identify the culprit. Using, digital forensics, the information communicated by a person can be cross checked with the digital artifects to ensure that the investigation is moving in the right path. Under the document authentication, using digital forensics, the falsyfication of the documents if any can easily be identified. These are a few uses of digital forensics which helps in solving the cyber crimes and safeguard the computer security.