Mike Meyers' CompTIA Security+ Certification Guide (Exam SY0-401)

MODULE 40

Forensics Procedures

Computer forensics was once a very small niche in the information security world. Over time, however, as computer-related crime and misuse have increased, it has become more important. Today, forensics is its own fully fledged discipline within computer security. Computer forensics, like its medical and criminal counterparts, is a very exacting science. It requires strong skills and knowledge in a wide variety of areas, including operating systems, networking, information security, and even law. The procedures used in computer forensics must be very exacting and precise in order for the results to be useful and admissible in a court of law. Even in private or corporate investigations, the computer forensics investigator ...