Digital Forensics Process

Question 1

What is the definition of “Digital Forensics Process”?

Answer 1

The process of gathering, analyzing, interpreting and presenting evidence derived from digital devices for use in a court of law.

Question 2

List the process of a Digital Forensics Process.

Answer 2

• Acquisition & Preservation
• Analysis
• Presentation

Question 3

Digital Forensics Objectives

Answer 3

• Recover relevant user data. e.g.: Photo’s, Documents, Video’s, E-mails, Contact etc…
• Recover information related to user actions. e.g.: accessing a website, sending an e-mail, taking a picture or deleting a file etc …
• Preserve evidence. Preserve the data in its most original form.