Introduction to Computer Forensics (Essay Sample)

Introduction to Computer Forensics (ITAS464-1405A-01)
Name
Institution
Computer forensics is a detailed investigation that has been conducted and analyzed using different techniques so that enough evidence can be preserved so as to have a documented proof the person who was using the computing device will be known and what happened to the machine. This is done to all computing devices so that the information can be presented to the court of law when required. This is done by forensic investigators and this means that certain standards are set to ensure that ethos in computing is followed and the correct procedure for carrying investigation is used. The detailed analysis and investigation is done in digital manner where the copy is locked in a place which is safe after investigators use software’s that have forensic applications so that all folders that are hidden, deleted, damaged among others have been found. Computer forensics is related to incident response since after breach is caused by individual incident response is required for example incase of hacking what time will it take to curb the problem? E- Discovery is related to computer forensics since electronic discovery is required when carrying out detailed analysis in computing and thus there is need for carrying investigations when dealing with exchange of information in computing and thus computer forensic is needed (Vacca, 2005). Data recovery is related to computer forensics since if data is lost through intended means either by hackers or other individuals then computer forensics can be done to ensure all the data is retrieved.
Incidence response is defined as a breach or vulnerability when it occurs like viruses, hackers’ among others will take time to get the information about the breach and curb it. This means that certain duration can take place before getting the correct information and thus it is termed as incident response. Incident response is different from others for example E- discovery of all the data will have to be done electronically waiting for forensic investigators to give the deadline that will be taken to come up with the solution. It is also different from data recovery since certain software’s for retrieving the data will be used when doing it electronically or those information that have been stored electronically (Prosise and Mandia, 2003). For data recovery it is restored back to the laptops or desktops for the company or when the server of the company has clashed though in normal circumstances backups are always there for the companies. For computer forensics incident response goes hand in hand since after detailed investigations then measures and deadlines must be set to come up with the re...