Foundations of computer forensics: A technology for the fight against computer crime

摘要

With the rapid advance in computer and network technology, computer-based electronic evidence has increasingly played an important role in the courtroom over the last decade. Computer forensics, a growing discipline rooted in forensic science and computer security technology, focuses on acquiring electronic evidence from computer systems to prosecute computer crimes, national security threats, and computer abuse. It has lost its mystique as a technique used solely by law enforcement and intelligence agents, and has become a popular and powerful application employed by corporations for civil disputes, employee terminations, and intellectual property proceedings. This article provides an introduction to computer forensics and outlines the associated inspection steps.