Digital Forensics Explained

13

2

DIgItal ForensIc approaches

anD best practIces

Introduction

Forensics is the application of the scientific process to answer a question. For digital

forensics to be an accepted science, it has to apply the scientific method. e scien-

tific method is the application of a set of accepted and verifiable steps to investigate a

question or problem. e digital forensic process needs to include a thorough enough

review to confirm findings, and it should not overlook artifacts that may discredit the

findings. In other words, the investigator needs to follow due diligence and review all

facts, not just the facts that produce a desired result. In many instances, the forensic

review will be performed for one party and the same evidence will undergo a simi ...