 |
Home > Services > Forensic Investigation > Computer Forensic vs Data Recovery |
Computer Forensics vs Data Recovery
Data recovery process is just the process of recovering lost data from corrupted media, due to logical or physical failure. It does not take into account the details of chain of custody of data media, acquiring of un-tampered data source and, examination and documentation of data for evidence etc.
Computer Forensic Investigation generally involves three key stages:
| Acquisition | Secure source computer equipment and data storage media with special attention to ensure that the data source is not tampered throughout the investigation |
| Analysis | Examine, filter, interpret and categorize all relevant data (lost, hidden, encrypted or temporary files) and evidence |
| Reporting | Detailed documentation of all processes, analyzed result and conclusion |
Without following proper procedures, evidence acquired may not be permissible in Court. It is therefore important to ensure that forensic investigation be carried out by forensic specialists with proper training and experience.
A qualified computer forensics investigator would have gone through proper training to handle digital evidence in proper manner. The investigator will also ensure that original evidence does not deteriorate or get altered throughout the whole process of investigation. It is also important that the forensic specialist have the necessary skill sets to succeed in such investigation.
