Computer forensics is a branch of Forensic Science pertaining to legal evidence found in computer systems and digital storage medium. It is to perform forensic investigation on digital evidence while maintaining the documented chain of custody so that it can be presented as evidence in the court of law.
Scope of Computer Forensics Unit
- Scientific examination and analysis of Digital Storage Media for example Hard Drives, Flash Memory, Floppy Disks, CD/DVD etc.
- Forensic Analysis of Mobile Phones and Personal Digital Assistants (PDAs).
- Forensic Examination of standalone/networked computers after a break-in, for example, to determine how the attacker gained access and what the attacker did.
- Retrieve/acquire evidence from digital media.
- Recovery of deleted digital data in case of damaged hardware that may have evidentiary value.
- Recovery of deleted digital data in case of software failure that may have evidentiary value.
- Forensic Analysis of retrieved and/or submitted media.
- To provide expert testimony on resultant analysis on Agency cases in the Court.