How Computer Forensics Works
Let’s start with a simple explanation of what computer forensics is. HINT: it’s not the same as what you see on NCIS. When we talk about computer forensics, we are talking about digital forensics.
The term digital forensics is referring to the investigation of a computer asset that an owner suspects may have been used for some unauthorized activity
Digital forensic investigations fall into two main categories: civil or criminal. NOTE: Techni-Core does not conduct criminal forensic investigations — we conduct civil investigations.
- Criminal: carried out by law enforcement and take place when there is reason to believe that a crime has taken place and often require a search warrant signed by a Judge who is satisfied that there is “Probable Cause” for such action
- Civil: these investigations are those in which no criminal activity has taken place, but if in the course of a civil investigation we uncover criminal activity we immediately suspend further activity and hand over all materials to law enforcement