Digital Forensic Analysis

4605 Words10 Pages

This chapter aims to place the field of digital forensics as a science within the broader spectrum of disciplines. A few definitions of digital forensics are given. These definitions are critically discussed in addition to comments found in the literature. The main elements are identified from which digital forensics is defined for the purposes of this dissertation.
Digital forensic investigation as used in this dissertation is discussed by investigating definitions found in the literature. Forensic science is brief introduced, followed by some reaction on its definition and historic origin in Section 2.2. Section 2.3 places forensic science as a discipline among other sciences, where after the term digital forensics as defined in the literature …show more content…

At first glance, this seems to be a copy of Palmer, but there are a few important differences. First, Willassen replaces use with practice. Secondly, not only the method is important, but also tools used to produce evidence. Thirdly, the criminal element is removed from the definition, which broadens the scope of application to include digital forensics as a means for finding originating causes in other types of investigations. Lastly, the root cause is not included. Certain investigations will not have a specific root cause.
Willassen states that the investigation will be after the fact, or post incident [117]. A striking similarity with Palmer is that the process can be used to aid in providing evidence, make a possible reconstruction of events; and help in preventing future similar incidence [80].
From the definitions listed earlier and the discussion above the common elements identified in a digital forensics definition …show more content…

The legal foundation is not the focus of this dissertation, but is seen as the departure point in various methodologies [74].
2.6 Digital Forensic Investigations
Digital investigations, digital forensic investigations, forensic examination and forensic investigations have been used to describe an investigation where a digital device forms part of the incident. For the purposes of this dissertation the term digital forensic investigation (DFI) is used. The terms will however be used interchangeably in this section to accurately reect various author opinions. The successful outcome of a DFI is the presentation of digital evidence (to be discussed in Chapter 3). A DFI is conducted by an appropriately qualified investigator

Open Document