Digital Forensics: Forensics and Incident Response

Running head: DIGITAL FORENSICS
Digital Forensics: Forensics and Incident Response
Name of the Student
Name of the University
Author Note

DIGITAL FORENSICS1
Introduction
The branch of forensic science that mostly deals with recovery and investigation of
digital data and other Digital information materials found within a particular digital device is
known as digital forensics. On the other hand, incident response is a particular event which
heads into the loss of operations within an organisation that is usually led by cyber-criminal
activities which is detected with the help of digital forensics (Spring and Pym 2018).
Following would be the description of the method of digital forensics for incident response
with critical reflection to the method.
Description of the method
The uncovering of digital crime is ideally done with the help of digital forensics. The
recovery of stolen digital data is possible with the help of Digital forensic so that any
identification or recovery of criminal activity over cyber world can be detected (Englbrecht et
al. 2019). Both incident response and digital forensics are two extremely important part of
information security as there have been numerous cases of cyber security violation over the
last few years. While the Digital forensic process is mostly divided into three procedures,
incident response offers expert guidance to deal with an accounting incident.
The first step of Digital forensic begins with capturing of the original digital evidence
and having a forensic image made. There are several copies of the incident created for several
investigators to walk on the incident (Daily 2019). It would minimise the chances of
modifying the original evidence.
The next step is to copy the authenticated evidences and then verification by the
investigators to find out if the copy made for the original evidence is an exact replica.