Computer crime - forensics

Computer forensics refers to the use of computer contents and data for litigation (or lawsuit) purposes. There are strict rules to follow to ensure that the contents or data are not compromised as they will be used as evidence often to establish civil or criminal liability of the defendant or accused.

Various companies claim expertise in this area. I have no personal knowledge of anyone of them.

For additional information about computer forensics, I have adopted, with permission, information from Adriot Data Recovery Centre as at 1 April 2009 (http://www.adrc.com/forensic_investigation.html). The portion in blue below is taken straight from the webpage.

What is Computer Forensics?

Specialized and scientific techniques and methodologies which are used to acquire and analyze computers, computer networks and storage media in order to discover evidence related to fraud, crime or unauthorized activities.

"Who needs or who uses Computer Forensic Services?

Mostly, companies may engage in computer forensics investigation when they suspect a breach in data security or illegal activities in a network or computer system, for instance, employees' activities such as internet abuse or porno, unauthorized disclosure or intentional deletion of sensitive or confidential information, industrial espionage or computer fraud.

Whether you are looking for digital evidence in a law suit, or determining exactly what an employee has been up to, ADRC is well equipped with Certified Computer Forensic Experts who know how to secure and document digital evidence with full audit trail suitable for court submission.

One should not attempt to do the investigation without proper techniques and expertise. Evidence could be easily destroyed or altered by just booting up the suspected computer with a quick browse."