Computer forensics, also called cyber forensics, is the application of computer investigation and analysis techniques to gather evidence suitable for presentation in a court of law. The goal of computer forensics is to perform a structured investigation while maintaining a documented chain of evidence to find out exactly what happened on a computer and who was responsible for it. A computer can be the target of the crime, it can be the instrument of the crime, or it can serve as an evidence repository storing valuable information about the crime. Moreover the hard disk is the core carrier of all important information. In some sense, hard disk is a very precise micro-computer. Only with the normal running of the micro-computer, can we access to the OS,

Read the rest of this entry »