Computer Forensics: Digital Evidence and Data Handling Analysis

This report provides a comprehensive overview of computer forensics, focusing on the extraction and analysis of digital evidence from devices like smartphones. It begins with an introduction to digital forensics and its evolution, highlighting the shift from traditional computer-based evidence collection to the more complex realm of smartphones. The report then delves into a case study involving Dr. Murray's iPhone, detailing the digital evidence uncovered and its significance in the investigation. It discusses the importance of smartphone evidence collection, explaining the challenges and techniques involved, and contrasts them with older methods of data extraction. The report also considers the advancements in digital forensics procedures and the increased understanding within the law enforcement community. It concludes by emphasizing the growing role of technology in aiding investigators in finding and analyzing digital evidence, reflecting on the ongoing advancements in this field.

Running Head: COMPUTER FORENSICS
Computer Forensics
Name of the Student
Name of the University

1COMPUTER FORENSICS
1.0 Introduction
Digital forensics is a field of forensics that deals with the extraction of evidences from
digital devices like smartphones and computers. However, a few years back, smartphones were
not very popular or advanced and hence, when it came to extraction of digital evidence, the
investigators were not much efficient in collecting the evidence.
In this report, several questions have been answered regarding digital evidence by
focusing on the provided case study.
2.0 Smartphone, Forensic Evidence and Data Handling
2.1 Digital Evidence from Dr. Murray’s iPhone
Following the investigation of pop icon Michael Jackson’s death, several digital
evidences were uncovered from Dr. Murray’s iPhone. These evidences included recording of
Jackson speaking in a slurred manner, digital medical charts (that were considered to be non-
existent before the discovery), some medical procedures followed by the doctor and others.
All these evidences turned out to be crucial to convict Dr. Murray because it was evident
that he did not follow standard medical procedures for the treatment of Jackson (Cahyani et al.,
2017). Moreover, the digital medical charts that were previously found to be non-existent were
found from his phone that clearly depicts that he was trying to hide substantial evidence
regarding the death of the pop icon.

2COMPUTER FORENSICS
2.2 Forensic Evidence Collection Topic
One forensic evidence collection topic in the article that I found interesting is the
collection of evidence from smartphones. This has been a new trend as smartphones were not
much used even a few years ago. Previously, for digital evidence collection, evidences were
mainly collected from computers and the general process was to seize the hard disc and extract
information from the same (Walnycky et al., 2015). However, I learnt that such type of
procedure cannot be used for smartphones as data cannot be extracted from it when it is switched
off. Moreover, if the phone is switched off before collection of data, some major pieces of
evidence may get lost or deleted.
This topic is important for forensic investigators to understand because they are mostly
not yet acquainted with the digital evidence collection from smartphones and may lose important
evidence due to mishandling of the device.
2.3 Understanding of Digital Forensics Procedures
This article is quite a few years old and in the time from the article and present day, there
have been significant changes in technology. Technology has been upgraded at a stellar pace and
also, the understanding of people regarding technical advancements and specifications have
increased significantly (Anglano, Canonico & Guazzone, 2016). Hence, it is believable that there
is a better understanding of digital forensics procedures and evidence collection within the law
enforcement community in the current time. This is also supported by the fact that there are
specific forensic departments around the world that solely focus on extraction of evidence from
smartphone devices.

3COMPUTER FORENSICS
3.0 Conclusion
It can be concluded that technology and its usage has increased significantly in the last
few years and will continue to grow in the next few years as well. Technology assists the
investigators in many ways who want to extract digital evidence from various devices. With the
assist of technology, the investigators can now use various techniques to find suitable pieces of
evidence as necessary.

4COMPUTER FORENSICS
References
Anglano, C., Canonico, M., & Guazzone, M. (2016). Forensic analysis of the chatsecure instant
messaging application on android smartphones. Digital investigation, 19, 44-59.
Cahyani, N. D. W., Martini, B., Choo, K. K. R., & Al‐Azhar, A. M. N. (2017). Forensic data
acquisition from cloud‐of‐things devices: windows Smartphones as a case
study. Concurrency and Computation: Practice and Experience, 29(14), e3855.
Walnycky, D., Baggili, I., Marrington, A., Moore, J., & Breitinger, F. (2015). Network and
device forensic analysis of android social-messaging applications. Digital
Investigation, 14, S77-S84.