A Practical Guide to Digital Forensics Investigations, 2nd Edition

Chapter 1

The Scope of Digital Forensics

Learning Outcomes

After reading this chapter, you will be able to understand the following:

• The definition and importance of digital forensics;

• Different types of digital evidence and how they are used;

• The skills, training, and education required to become a computer forensics investigator;

• Job opportunities in the field of computer forensics;

• The history of computer forensics; and

• Agencies in the U.S. and internationally involved in computer forensics investigations.

Digital forensics is the retrieval, analysis, and use of digital evidence in a civil or criminal investigation. Ironically, digital forensics (or computer forensics) is not limited to computers as the source of evidence. Any medium that ...