Computer Forensics: Issues in Preserving Digital Evidence and Forensic Investigation

Technology is constantly changing, and as the capabilities change, so do the issues in Forensic information technology (FIT). FIT is defined as the scientific use or application of information technology (IT) that is used to generate and present digital evidence to be used in courts, legal or other formal proceedings (Volonio). While the use of technology helps get things done faster, it also can present many issues if the proper procedures and tools are not used and followed. An existing issue in FIT is computer forensics, in regards to preserving digital evidence and effectively conducting a computer forensics investigation. Computer forensics can be defined as the who, what, when, and how of digital (electronic) evidence and how techmology is used to preserve, authentic, and analyze the evidence collected (citation 17utah). If obtained evidence is not handled propely, this could jepoeradize its reliability when being admitted into court. It is important to identify the issues, possible solutions, and the type of technology that is used in computer forensics, especially during a computer forensic investigation. This paper will provide an insight to the existing issues in FIT such as computer forensics, with emphasis on preserving digital(electronic) evidence and the issue of effectively aquiring, authenticating, and analyzing retrieved information during a forensic investigation.
17utah pg. 10-11
Introduction
Computer forensics is the application of analytical techniques on digital media after a computer security incident has occurred. Its goal is to identify exactly what happened on a digital system and who was responsible through investigative procedure. Computer forensics involves the preservation, identification, extractio...

... middle of paper ...

...d electronic discovery: The new management challenge. Computers & Security, 25(2), 91-96. doi:10.1016/j.cose.2006.01.002
Kruse, W. G., & Heiser, J. G. (2001). Computer forensics: Incident response essentials. Boston, MA: Addison-Wesley, p.3-15.

Mercer, L. D. (2004). Computer Forensics Characteristics and Preservation of Digital Evidence. FBI Law Enforcement Bulletin, 73(3), 28-32.
Volonino, L., Anzaldua, R., & Godwin, J. (2007). Computer forensics: Principles and practices. Upper Saddle River, N.J: Pearson/Prentice Hall.

Wall, C., & Paroff, J. (2004). Cracking the Computer Forensics Mystery. Utah Bar Journal, 17(7), 10-17. Retrieved from http://heinonline.org.

Warren G. Kruse II and Jay G. Heiser. Computer Forensics: Incident Response Essentials. Addison
Wesley, Boston 2001, p. 2.

Wolfe, D. B. (2003, January). Computer forensics. Computers & Security. p. 26-28