Digital Forensics, Investigation, and Response 5E, 5th Edition

Understanding the Field of Digital Forensics

The digital forensics field is changing rapidly. First and foremost, standards are emerging. This means there are clearly defined ways of properly doing forensics. When computer forensics first began, most investigations were conducted according to the whims of the investigator rather than through a standardized methodology. But as the field has matured, it has also become standardized. Today, there are clear, codified methods for conducting a forensic examination.

Another change is in who is doing forensics. At one time, all forensics, including computer forensics, was the exclusive domain of law enforcement. That is no longer the case. Today, the following entities are also involved in and actively ...