Today most records of individuals, businesses, government agencies, and even criminal organizations are stored on various types of electronic media. In order to properly investigate a suspect, evidence needs to be extractable from electronically stored information (ESI) sources without being corrupted.
Digital forensics is the acquisition, scientific examination, and analysis of data retrieved from digital devices (computers, mobile phones, game consoles, memory sticks, etc.) in such a way that the information can be used in a court of law or for the purposes of the retriever without any disturbance to that evidence. Digital forensics often requires workstations that . . .