Computer Forensics Basics
- Computer Forensics in a Nutshell
 Computer forensics are examinations of computers made during a criminal investigation. When police look into the files and data on a computer during an investigation, they are using computer forensics. It is obvious that you would want to look at a suspect's computer if they are involved in a hacking or industrial espionage case where the computer is being actively used to commit the crime, but these are not the only sorts of cases where computer forensics is used. Even if a murder case or a theft where a suspect used a computer could have information on it that is important to the case. You never know where you might find the information that you need for a case, and so investigators look at everything they can find.
- What Computer Forensics Investigators Look At
There are three basic kinds of data that a computer forensics investigator will look at when examining a computer: saved data, meta data and deleted data.
The first thing that a computer forensics investigator will do before examining this data is to make a copy of the hard drive. Even just looking at a file can sometimes change the data or meta data, and it is important that none of the original information is tampered with when using it in a criminal investigation. Making a copy of the computer's hard drive allows the investigator to go through all of the data without having to worry that he is tampering with potential evidence.
Saved data is any data that is normally accessible on a hard drive. It is all the data that is saved onto the hard drive. This includes things like documents, imagages, internet logs, program files, etc. This is the easiest data to look at, because it involves no special working to access these files. Sometimes files might be hidden within multiple folders or using confusing file names, so the examination will need to be thorough to make sure anything important to the case is found. Files can also sometimes be password protected, which makes it more difficult for an investigator to open them to read them. Computer forensics investigators are trained to get around these kinds of blocks.
Meta data is information that accompanies saved data. It is the information that tells you about the saved dat, like when a file was created, when it was last modified and when it was last accessed. This tells us when something was made, when the person who created the file was using it and if he had made any changes to it. This can be useful as it can help put a timeline to the data the investigator is looking at, and match up information for use with the case.
Deleted data is data that has not been saved on the computer or has been deleted from the computer. You can't access this information just through normal use of the computer. It requires special software or special methods to go into the hard drive and look at it.
When a file is deleted from a computer, it isn't actually removed from the hard drive. The file is kept in the same place as it always was. What is really happening is that the computer is being told that this file does not exist, and it will act as if it doesn't. You can't look at the file if you are just looking through the saved data, because the computer doesn't see it as saved data. However, if you skip over what the computer thinks about the data, and only look at the raw data, you will be able to see the file still there.
There are some difficulties with this, though. Because the computer doesn't think that the file is there any more, it has no problem putting new data where the deleted data was. If this happens then the file will be erased and you will no longer be able to look at it. Sometimes the new data doesn't completely write over the deleted data though, and an investigator can sometimes still see traces of the deleted data on the hard drive. It is similar to when you tape over an old VHS tape, sometimes the old show or whatever you had taped before will pop up every now and then because the new taping isn't total. These traces can give the investigator an idea of what the computer user had deleted, and can sometimes give cues as to why it was deleted.
- Computer Forensics Growing
As computers continue to become more important in America, computer forensics will continue to grow as well. Looking at data can lead to information that would never be found through other methods of investigation, and it proves very useful in a number of different criminal cases.
About the Author
Allen Butler is a freelance writer who specializes in internet content. If you need quality content written fast, he has the dedication and the ability to deliver. If you would like a free sample article, e-mail him at allen_butler3000 [AT] yahoo.com.
Steganos Privacy Suite Mobile: Privacy protection for your smartphone.
NAVIGATION
ABCs of Computer Memory
About Computer Beeps
About Computer Viruses
Adware and Spyware Protection
Adware in Business Computers
Affiliate Business - Peripherals, Software, Computers
Are Public Internet Computers Dangerous?
Aurora Computer Virus
Avoiding Internet Threats - Securing a Computer
Avoiding Spam, Scams and Viruses
Backup a Computer Advice
Backup Data on My Computer
Backups: Don't Play Russian Roulette
Barebones Computer Buying
Become a Computer Trainer
The Benefit Of Computer Certifications
Build a Computer
Build a Computer From Scratch
Build Computer or Buy?
Build Your Own Computer
Business Computer Geeks
Business Data - How Safe is It?
Buy a Cheap Computer Desk?
Buy a Home Through a Computer
Buying a Computer? Ask These Questions
Buying a New Computer
Buying a Used Laptop
Buying Computer Parts
Buying DDR Memory
Buying Discount Computers
Buying Guide for Laptops
Buying the Perfect Computer
Check for Infections
Chinese Reading Online
Children - Computer Advantages
Choosing a Laptop Computer
Choosing an Oak Computer Desk
Choosing the Right Computer Case
Color Code Your Computer
Combat Spyware - AntiSpyware Isn't Enough
Combat Viruses
Computer Buying Advice For Novices
Computer Can't Keep Time
Computer Career Choices
Careers for Computer Geeks (11)
Computer Case Basics
Computer Case Modding
Computer Certification
Computer Certification Utility Player
Computer Classifications
Computer Classroom Rentals
Computer Cleaning
Computer Cleaning Business
Computer Clutter Clean Up
Computer Components for Idiots
Computer Consultant Hiring Tips
Computer Consulting Businesses
Computer Consulting Hiring Tips
Computer Consulting Profit Secrets
Computer Courtesy
Computer Data Backup Peace Of Mind
Computer Data Backup Tests
Computer Data Recovery Options
Computer Desks
Computer Desks for Children
Computer Disaster Preparation
Computer Disposal and Recycling
Computer Disposal Security
Computer Do's and Don'ts
A Computer For Entertainment Needs
Computer Forensics Basics
A Computer Friendly Resume
Computer Hygiene
Computer In The Shop?
Computer Insurance
Computer Literacy
Computer Loans - An Opportunity to Have a Computer
Computer Loans - Become Techno Savvy
Computer Maintenance and Performance
Computer Profits From Home
Computer Rental Advice
Computer Running Slow?
Computer Security from a Keen Non Techie
A Computer Security Policy
Computer Technology Advancements
Computer Thermodynamics
Computer Tips to Operate Profitably
Computer Traumas
Cost of Spyware on a Computer
Criminals Phishing Identities From Computers
Dead Computer - How to Revive It
Dell Recall of Laptop AC Adapters
Detecting and Eliminating Viruses
Disk Management Software - Secure Your Data
Do Computers Have to be Clinical and Boring?
Does the Media Spread Viruses?
Do You Need Computer Training?
Dusting Your Computer - Keeping it Cool
DVD Backup is an Attractive Alternative
Earning a Computer Degree Online
eBay Automobile and Computer Scams
eBay Computer Purchases
Ergonomic Computer Products
Fifth Generation Computers
Finding Great Deals On Computer Accessories and Supplies
Free Computer Space
The Future Of Computer Certification Exams
Game Creation - How to Get Started
Get a Computer Without Spending a Fortune
Get Rid Of Computer Viruses
Hacker Inside My Computer?
Hard Drive Data Loss Recovery
Hardware for Computer Desks
A Healthy Computer and a Happier You
Hidden Information on a Computer
Hide Files and Folders on a Computer
History of Computers - The Evolution of Technology
History Of Laptop Computers
Home Computer Desks: A Variety of Options
Home Office Health Hazards
How to Backup Computer Data
How to Backup Your Computer Files
How to Become a Computer Consultant
How To Buy The Right Computer
How to Choose a Computer
How to Choose a New Hard Drive
How to Deal With Computer Problems
How to Keep a Computer Virus Free
How to Organize Computer Files
How to Prevent Computer Security Risks
How to Prevent Spyware Attacks
How to Reduce Computer Problems
How to Revive a Dead Computer
How to Safeguard a Computer
How to Save on Software
How to Take Care of a Laptop
How Viruses and Spyware Get in a Computer
Hurricanes Force Businesses to Rethink Computer
Image Conversion In Computers
Increase Computer Speed
Infected With Spyware?
Information Technology Consulting - Getting Started
Introduction To Computers
Introverts and the Information Age
Is My Computer Strong Enough?
Is Spyware Slowing Your Computer Down To A Crawl?
Is Your PC Sick?
Jobs Online: Make a Computer Work For You
Keep A Computer Diary
Keep a Computer Running at Maximum Performance
Keeping My Computer Spyware Free
Land Computer Jobs
Laptop Choices - Finding the Right One For You
LCD Touch Screen Computer Monitors
Learning a New Computer Skill
Least Expensive Computer Upgrade
Make a Fortune in Computer Services
Make Computer Software Without Programming
Make Money Working From Home
Make Night and Weekend Computer Life Rich
Making Money With Computers
Master Any Software Program
Math and Dosage Calculations
MCSE? CCNA? How To Choose a Computer Certification
Memory CAS Latency
Memory for Computers
Misleading Computer Dealers
Mobile Laptop Extras
Monitor Buying Guide
Move Files to a New Computer
Network Design
Network Installation
Newbie Guide to Personal Computer Maintenance
No Computer Sound
Notebook or Desktop Computer - Which to Choose?
Optimize Your Computer For Peak Performance
Organizing a Computer Desktop
Paper or Computer Files - What to Keep?
Performance Computer Chips For Cars and Trucks
Physical Topology of a Network
Prevent Computer Intruders
Preventing Malicious Spyware or Adware
Printer Life Extension
Problems with a Computer Virus
Programmer Career Track
Pros and Cons of Owning a Laptop
Protect Your Computer
Protect a Computer from Hurricanes
Protect a Computer From Viruses
Protect a Computer on the Internet for Free
Protect and Secure Computer Life
Protect Computer and Internet Privacy
Protect Your Computer and Personal Information From Spyware
Protect Your Computer and Business
Protect Yourself from Computer Viruses
Protecting a Computer on the Internet
Protocols - Communications Between Computers on a
Network
Quick Guide to Computer Training
Rackmount Computer Cases
Rackmount Computer Keyboards
Rackmount Computer Monitors Provide Dependability
Raster and Vector Computer Images
Recognize a Virus or Trojan
Refurbished Computers
Reinstall Windows XP on a Computer
Remove Spyware - How To Instructions
Removing Adware from a Computer
Reviving Old Computer Games
Roll Top Computer Desks
Save Big Bucks on a Laptop Computer
Save a Bunch of Money When Buying a New Computer
Save Computer Documents - How to Instructions
Save Email - How to Instructions
Save Internet Explorer Favorites
Save on Computer Buying Tips
Saving Money With a Computer Support Plan
Security Necessities to Prevent Spyware
Selecting Computer Cases
Simple Computer Training
Slow and Sluggish Computer? Take These Steps to Speed it Up
Small Business Virus Protection
Software Engineer Career Track
Software Layers of a Computer
Solve Computer Memory Problems
Speed up a Computer - Six Simple Steps
Speed Up a Computer Without Upgrading
Speeding Up a Computer
SpyProofing a Computer in Four Easy Steps
Spyware in My Computer
Spyware Programs That Slow System
Spyware Protection: A Must for any Computer
Spyware Solutions
Starting a Home Computer Business is Smart
Stop Computer Slow Downs and Crashes
Stop Computer Viruses
Stress Reducing Computer Tips
Student Computer Lessons
Summer Computer Tips
Survive a Computer Crash
Tips for Buying a First Computer
Tips for the Late Blooming Computer User
Tips for Presentations with Computer Projection
Transfer Digital Camera Images to a Computer
Trials and Tribulations of a Confused Computer
Twelve Threats No Computer User Should Ignore
Types of Computer Infections
Underutilized Computers
Uninstall Software Instructions
Unleash the Dragon Inside Your Computer
Do You Feel Used by Computers?
Heliodisplay - Computer Video With No Screen
Virus Protection Tips
Virus That Could Take Advantage of You
Virus That is Virtually Undetectable
Virus Writers
Viruses: Top 10 Things to Know
Viruses, Worms and Hoaxes
Watch Out for Spyware Programs That Slow Down Computer
Web Cam Advice
What are Rackmount Computers?
What Is Computer Programming Anyway?
What is Computer Security?
What is Spyware and How Do I Remove It?
What's in a Computer Name?
When to Rent a Laptop
Who's Peering Into My Computer?
Why Build a Gaming Computer?
Why Do I Need Anti Virus Software For My Computer?
Wireless Computer and Projector Rentals
Women Should Consider a Career in Computer Programming
Work at Home Computer Jobs Are Plentiful
Work At Home Computer Jobs Give Freedom
Work At Home Using a Computer, Even If You Can't Type
Work From Home Using Computer
World Of Podcasting
Worms and Virus Infection Repair
| 
