Digital Forensics

Introduction
Forensic science is as the application of science to the law. Digital forensics, also known as computer and network forensics, has many definitions. Generally, it is considered the application of science to the identification, collection examination, and analysis of data while preserving the integrity of the information and maintaining a strict chain of custody for the data. Analysing and reporting on digital data in a way that is legally admissible. It can be used in the detection and prevent crime and in any dispute where evidence is stored digitally. Computer forensics follows a similar process to other forensic disciplines, and faces similar issues.

Types of Computer Forensic Investigations
Computer based crime

But to construe this term in such a way that both the technocrats and home users may easily get its concept, it can be defined as "Developing sector-by-sector copy of a disk followed by the compression of these images in the form of a file. The captured image can be stored on any other divergent media or device and can be restored later as per need at any point of investigation." The modus operandi and approach of the working on this technology involves four key steps that include proper identification, preservation, in-depth analysis and presentation of the digital evidences In forensic investigations, one other reason for creating the images of data on hard disks can be generation of backup of the original stored data. But the core purpose of it is digital investigation and analysis in the course of frauds, forgeries, scams, etc. A good quality disk imaging backup tool by no means alters the original and true evidence. Instead, it creates a replica of all the data on other media and makes them available for detailed

While most people think of backing up data, disk imaging programs back up not only data but also the computer's systems and configuration.
Data Protection: Most users create a disk image to prevent data loss from a virus, system crash or disk failure. every hard drive is going to die eventually. If so, you can buy a new hard drive and replace the dead one, and then restore disk image to bring your computer to the state when it works well and all data is intact.
System Migration: Because the performance of SSD is better than HDD, more and more people are more willing to clone HDD to SSD or migrate OS to another computer with better hardware. Thus, disk imaging is an alternative way to directly clone. Also, you can create a system image.
OS Deployment: Large companies often need to buy large numbers of new computers with same or different hardware. Installing operating system and programs into each of them one by one requires a lot of time and effort and has a significant possibility of human error. Therefore, system administrators create a disk image with fully prepared applications environment of a well-adjust system to quickly deploy it to each computer by using PXE network boot. This method saves time and