Digital Forensics

---

Digital forensics is the branch of forensic science focused on identifying, acquiring, and analyzing electronic evidence. Digital forensic investigators collect, assess, and present digital evidence gathered from the event logs generated by:

• Computers
• Mobile devices
• Applications
• Network devices
• Databases
• User accounts

Digital forensics uses scientifically accepted and validated processes so that organizations and individuals can use the data in and out of court. Data obtained through a digital forensics extraction and examination may be provided to:

• Law enforcement
• Legal teams
• Auditors
• Regulatory agencies
• Private individuals for a qualifying purpose

Digital evidence enables investigators to:

• Investigate incidents faster
• Identify breach data and attackers
• Document fraud and identity theft
• Draw conclusions about malicious actors based on the information they leave behind in systems and networks
• Create detailed security incident reports for law enforcement, attorneys, judges, and senior leadership
• Recover data from broken or damaged hard drives, crashed servers, or devices that have been otherwise compromised