Digital Forensics

Digital Forensic
Digital forensics is the process of uncovering and interpreting electronic data. The purpose of the process is to preserve any evidence from original form in order to perform for investigation purposes with several procedures such as collect, identify and validate the digital information. According to (Kaur & Kaur, 2012) digital forensics is a branch of forensic science concerned with the use of digital information produced, stored and transmitted by computers as source of evidence in investigations and legal proceedings. 2.3.1 Basic Forensic Process
According to (Al-Fedaghi & Al-Babtain, 2012) claimed that the phase can be established through model process in digital forensic. There are four steps in digital forensic such as acquisition, identification, evaluation, and admission of evidence, and further described admissibility of evidence. The layer of outline abstractions has two inputs and two outputs in forensic examination. The basic

The first phase is to identify, label, record, and acquire data from the possible sources of relevant data in the process.
Examination. This phase is involved to process data collection in large amount by using of automatic and manual methods combination to access and extracting data of particular interest in forensic area.
Analysis. The third phase of the process is analyze the results of the examination by using legally justifiable methods and derives useful information techniques that able to addresses the questions that were the impulse for performing the collection and examination.
Reporting. The final phase is results of the analysis must been reported which may include the actions used in details, describes ways to use tools and procedures chosen, other actions that need to be performed and also providing recommend for improvement to policies, guidelines, procedures, tools, and other aspects of the forensic process provided. Figure 2.3.1 Basic forensic process
2.4 Digital Forensic