Chapter 1

The Scope of Digital Forensics

Learning Outcomes

After reading this chapter, you will be able to understand the following:

  • The definition and importance of digital forensics;

  • Different types of digital evidence and how they are used;

  • The skills, training, and education required to become a computer forensics investigator;

  • Job opportunities in the field of computer forensics;

  • The history of computer forensics; and

  • Agencies in the U.S. and internationally involved in computer forensics investigations.

Digital forensics is the retrieval, analysis, and use of digital evidence in a civil or criminal investigation. Ironically, digital forensics (or computer forensics) is not limited to computers as the source of evidence. Any medium that ...

Get A Practical Guide to Digital Forensics Investigations, 2nd Edition now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.