Digital Forensics Discussion 2022

Running head: DIGITAL FORENSICS
DIGITAL FORENSICS
Name of the Student
Name of the University
Author Note

1DIGITAL FORENSICS
Discussions
Digital forensic is the area of forensic science that consists of recognising, recovering,
investigation, validation and then presentation of facts regarding the evidences those are
digital and found on computer systems or same digital storage devices of media. The
investigators need to find these evidences for the successful investigation of a case (Keeling
and Losavio 2017). The first step to the investigation of the digital forensic is the collection
and acquisition of data. I have studied that handling the evidences those are digital are very
important for the investigation. I have learnt that the collection is the retrieval of the data and
information from the digital devices and making duplication of the electronic data from the
storage devices in a way such that the original do not change during the forensic
investigation. I have learnt that the forensic investigators must collect the data properly as
any can delete the data from the digital devices. I have studies about the order of collection of
data that must be followed by the investigators (Adedayo 2016). The order of collection of
the data include identification of evidence, determination of relevance of data, volatility that
is the data those are degraded should be collected first by the investigators. The investigators
must eliminate the outside interference, collection of the items with utmost care and lastly the
investigators must document the evidences that have been collected by them.
The next step after the collection of data is the acquisition of data. I have learnt that
the acquisition of data is the procedure of developing an image of forensic from the computer
media such as thumb drive, hard drive, servers and other media that stores these data. This
step is very important for the investigation (Watson and Dehghantanha 2016). I have studied
about the two types of acquisition of data. It consists of static and live acquisition of data. I
have studied that it is very important as it allows the volatility of the evidence and then
collects it in the order of volatility in order to increase the conservation of the evidences. I