Digital Forensics

Digital forensics is the branch of forensic science concerned with the investigation of digital media as it relates to cybercrime.

The realm of digital forensics includes:

• the identification and preservation of digital media that may potentially serve as evidence;
• the acquisition of digital data from digital media;
• the analysis of data;
• the interpretation of data; and
• the reporting of findings.

Common activities within the realm of digital forensics include:

• imaging disks;
• capturing memory;
• carving files;
• analyzing metadata;
• analyzing logs;
• analyzing network traffic;
• analyzing disk dumps;
• analyzing memory samples;
• investigating malware;
• investigating cybercriminal operations; and
• more.