Computer Forensics Analysis
A Backup Article Contributed by Melissa Larose
Computer Forensics Analysis
White-collar crime scenes have never been the same now that computer forensic specialists are on the job. Crime that includes computer use has its own special crime scene and it is one that requires detailed inspections and copious notes for further study and future reference.
Computer Forensics Rebuilds the Scene
Although a computer cannot come right out and state the motives of its users, there are many aspects to a computer and its processes that lend itself to re-creating events. Unlike human memory a computer's memory is accurate and any sabotage is apparent.
Computer based evidential data is used in court cases, insurance cases and in situations where companies need to trace intrusions or sabotage. It has cleared employment disputes, blackmail, money laundering, and theft of intellectual property.
The computer forensics field has several areas of training that all specialists use. There are set principles for handling and examining materials. Legal processes and rules of evidence must be followed in order for a finding to be accepted in a court of law. A clear understanding of a computer and its parts along with operating systems, data file systems and storage media, must be held by any one investigating a computer crime scene.
Forensic investigation techniques, case note reporting procedures, an understanding of court reports and courtroom procedure and expected presentation formats must also be well understood by the computer forensics specialist.
Computer Forensics in High Demand
Due to the rising use of technology, the open access society has to information, and the use of the computer in banking and commerce exchanges, criminals believe they have an easy way into the system.
The legal community is seeing more and more need to recoup computer forensics as a way to prove their cases. Computer forensics service companies are a much needed industry because of this recognition. But lack of well-trained and skilled staff is preventing the growth of theses service companies. The solutions to this dilemma are being considered but the truth is it needs to happen now and how to do that is a daunting task.
Using technically trained personnel who have no forensics background and who are directed by specialists trained in both fields is one solution being considered. Putting these trainees into internships and allowing them to create careers from their experience can cut the cost of any computer forensic services.
Computer Forensics Issues
There are some areas of contention when handling computers for use in a legal environment. - How to recover data and maintain integrity of the evidence. - How recovered data is stored and secured. - How to locate the most significant data in large volumes of evidence. - And finally the presentation of the information in court and as disclosure to the defense.
Computer disks, CD's, hard drives all can be tampered with and using these items as evidence opens up the possibility that a situation along those lines will arise some time in the future.
Computer forensics is in its infancy and it remains to be seen what it will grow into.
