Digital forensic process: Difference between revisions

Revision as of 20:31, 6 June 2023

Revision as of 06:05, 24 October 2023

Line 2:

The '''digital forensic process''' is a recognized scientific and forensic process used in [[digital forensics]] investigations.<ref name="first" /><ref name="handbook" /> Forensics researcher [[Eoghan Casey]] defines it as a number of steps from the original incident alert through to reporting of findings.<ref name="casey" /> The process is predominantly used in [[Computer forensics|computer]] and [[Mobile device forensics|mobile]] forensic investigations and consists of three steps: ''acquisition'', ''analysis'' and ''reporting''.

Digital media seized for investigation ismay usually referred to asbecome an "exhibit" in legal terminology if it is determined to be 'reliable'. Investigators employ the [[scientific method]] to recover [[digital evidence]] to support or disprove a hypothesis, either for a [[court of law]] or in [[civil litigation|civil proceedings]].<ref name="handbook" />

==Personnel==