Forensics is simply the application of computer investigation and analysis techniques in the interests of determining potential legal evidence. This process often involves the investigation and examination computer system(s), including, but not limited to the data acquisition that resides on the media within the computer. The forensic examiner renders an opinion, based upon the examination of the material that has been recovered. After rendering an opinion and report, to determine whether they are or have been used for criminal, civil or unauthorized activities. Mostly, computer forensics experts investigate data storage devices; these include but are not limited to hard drives, portable data devices (USB Drives, External drives, Micro Drives and many more). |