NCJ Number
218887
Date Published
2007
Length
14 pages
Annotation
This chapter examines the basics of computer forensics and computer forensics’ role in criminal investigations.
Abstract
Unfortunately, the number of computer-assisted crimes continues to rise and, as the number of incidents increases, so too does the need for a greater and more sophisticated level of investigation. Computer forensics refers to the use of computer science techniques to recover evidence from computerized devices and then to present that evidence in criminal trials. Computer forensics is a relatively new weapon in the war on digital crime; with that said, there are several problems associated with the use of this technology, ranging from providing investigators with training and equipment to finding personnel interested in investigating such criminal activities in the first place. Computer forensics requires a commitment to ongoing review and resources. The hope is that as criminal activities continue to evolve, so too will computer forensics technologies and techniques. This chapter examines the basics of computer forensics, including what is meant by the term computer forensics; how computers store data; how computer forensics programs operate; how the computer forensics process itself works; and finally the admissibility of computer forensics-related evidence. It also addresses some of the problems associated with integrating computer forensics programs into law enforcement agencies. References