CompTIA Security+ All-in-One Exam Guide, Fifth Edition (Exam SY0-501), 5th Edition

CHAPTER 24

Digital Forensics

In this chapter, you will

•  Study basic concepts of forensics

•  Understand the legal basis behind forensic processes

•  Understand the steps of digital forensics processes

Computer forensics is certainly a popular buzzword in computer security. The term forensics relates to the application of scientific knowledge to legal problems. Specifically, computer forensics involves the preservation, identification, documentation, and interpretation of computer data. In many cases, digital forensics is the technical side of developing proof as to what happened or didn’t happen as part of an incident response effort. Digital forensics specifically uses scientific principles to provide assurance in explaining what digital ...