Digital Forensics: Processes, Guidelines, and Best Practices

Forensics

Table of Contents
INTRODUCTION...........................................................................................................................1
MAIN BODY...................................................................................................................................1
TASK 1............................................................................................................................................1
TASK 2............................................................................................................................................3
TASK 4............................................................................................................................................6
CONCLUSION................................................................................................................................8
REFERENCES................................................................................................................................8

INTRODUCTION
The concept of digital Forensics generally involves a process that explains the uncovering
as well as interpreting the electronic information. The main objective of conducting a digital
forensic is to preserve the information as a shred of evidence in its most original form. A digital
investigation is used to identify the possible cause of cyberattacks. These can also be used in
safeguarding the digital pieces of evidence which are used in the cyberattacks before it becomes
outdated. This can help an investigator while performing structured research by collecting,
identifying as well as validating the information digitally so as to reconstruct the past occurring
events. The forensic investigation gathers and can analyse all the crime scenarios, including the
physical pieces of evidence, so that the investigators come to a conclusion about the culprits.
They identify the occurrence of crime by looking out the shreds of evidence such as blood fluids
or fingerprints. In this project, there is a discussion about the merits and demerits of investigating
digital Forensics and the processes which are involved in it. There is also a discussion about the
legislation's information guidelines while conducting digital forensic investigations. It also
includes information about the legal as well as ethical requirement that are needed for conducting
any research. Moreover, it is also discussed in this project that the possible consequences can
occur if the guidelines are not being followed while investigating any crime (Berg and et. al.,
2017).
MAIN BODY
TASK 1
Q1. With the aid of a diagram, explain your understanding of the term' digital Forensics'.
Ans.
1

The term digital forensics is defined as the scientific acquisition, analysis as well as preservation
of the information that is contained in electronic media in which the data can be utilized as a shred of
evidence in the justice system. The main aim of this process is to preserve any of the pieces of evidence
in their most original form while performing a structured investigation by collecting, identifying as well
as validating the digital data to reconstruct the past occurring events. The process of digital forensics
generally involves the steps such as identification of information, preservation of data, analysis of the
crime occurred, documentation of the provided information, and presentation of the data or shred of
evidences to the justice system (Zhang and Choo, 2020).
Q2. Conduct a detailed analysis of the processes and procedures for carrying out digital Forensic
Investigations.
Ans. In digital forensic investigations, the processes and procedures involve the following steps which
are as mentioned below:
Identification: It involves the identification of investigation aims as well as the required
resources. The analyst identifies the evidences, the data types from which the analyst deal with as
well as the devices in which the data is stored. In addition to this, the specialist can work with the
all types of electronic storage devices such as computers, hard drives, phones.
Preservation: It involves the isolation as well as protection of data or information as it
only ensures by the analysts that data is protected. It simply means that no person can use the
electronic devices till the investigation procedure ends. By this means, the shreds of evidence
remain secure (Haldar, 2020).
Analysis: In the step of the investigation, it generally involves deep systematic research
for relevant shreds of evidence. At the same time, it was analysing the specialist work with the
user as well as the system files and the information objects. Moreover, the analyst draws an
overall conclusion based on evidence that is found.
Documentation: It involves the documentation of all the shreds of evidence that are
found. It generally aids to extend the crime investigations. In documentation, it also involves the
evidences which are recorded in the form of photos, sketches and so on.
Presentation: It is the last stage of digital forensic investigation as it includes the records
of all the evidences as well as conclusions that occurs at a crime scene.
2